Security audit

buddy

Security checks for vulnerabilities and agentic risk

Overview

This virtual pet skill mostly matches its description, but it can execute JavaScript from a separate local Buddy extension that is not included in the reviewed package.

Install only if you trust any existing ~/.openclaw/extensions/buddy-companion installation on your machine, especially its sprites.js file. Be aware the skill uses local OpenClaw identity or host/user-derived data to keep your Buddy deterministic and stores or reads Buddy state locally.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

Confidence: 86% confidence
Finding: The skill derives a stable user identifier from device.json, an environment variable, or host/user information even though a local virtual pet feature does not appear to require device identity access. This creates unnecessary collection and persistence of identifying data, enabling cross-session tracking and potentially exposing host metadata if reused elsewhere.

Static analysis

No suspicious patterns detected.