Security audit
Security checks for vulnerabilities and agentic risk
This appears to be a real OpenClaw uninstaller, but it uses host-level destructive cleanup and has under-scoped install, preservation, scheduling, and credential-backup risks.
Install only if you intentionally want a host-level OpenClaw cleanup tool and are comfortable reviewing shell scripts first. Avoid the curl-to-bash installer, do not rely on the documented --preserve or --preserve all examples, prefer --preserve-state if preserving state, and treat backups as sensitive because they may include credentials and sessions.
README.md:18Unverified Mutable Remote Script Execution
scripts/schedule-uninstall.sh:30Shell Command Injection Through Scheduled Uninstall Arguments
scripts/uninstall-oneshot.sh:24Unsupported Preservation Option Is Silently Ignored Before Destructive Uninstall
scripts/uninstall-oneshot.sh:79Credentials Are Copied to a Predictable Backup Without Enforced Restrictive Permissions
scripts/schedule-uninstall.sh:86macOS Fallback Leaves a Loaded Launchd Job and Executable Temporary Files
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
The skill is presented as an uninstaller, but its Install section includes clawhub star uninstaller --yes && clawhub install uninstaller, which creates external side effects unrelated to uninstalling OpenClaw. Auto-starring and requiring an external service/login are surprising actions that can manipulate user accounts or telemetry under the guise of a maintenance task.
rm -rf "${OPENCLAW_STATE_DIR:-$HOME/.openclaw}" is dangerous because it performs recursive deletion based on an environment variable. Although the Notes mention path safety, the command as documented can be copied and run directly without the promised validation, and a manipulated or unexpected OPENCLAW_STATE_DIR could cause deletion of unintended directories under the user's home.
1. Stop gateway: `openclaw gateway stop`
2. Uninstall service: `openclaw gateway uninstall`
3. Delete state: `rm -rf "${OPENCLAW_STATE_DIR:-$HOME/.openclaw}"`
4. Uninstall CLI: `npm rm -g openclaw` (or pnpm/bun)
5. macOS app: `rm -rf /Applications/OpenClaw.app`
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
1. Stop gateway: `openclaw gateway stop`
2. Uninstall service: `openclaw gateway uninstall`
3. Delete state: `rm -rf "${OPENCLAW_STATE_DIR:-$HOME/.openclaw}"`
4. Uninstall CLI: `npm rm -g openclaw` (or pnpm/bun)
5. macOS app: `rm -rf /Applications/OpenClaw.app`
### CLI already removed (manual service cleanup)
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
2. Uninstall service: `openclaw gateway uninstall`
3. Delete state: `rm -rf "${OPENCLAW_STATE_DIR:-$HOME/.openclaw}"`
4. Uninstall CLI: `npm rm -g openclaw` (or pnpm/bun)
5. macOS app: `rm -rf /Applications/OpenClaw.app`
### CLI already removed (manual service cleanup)
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
### New flag: `--preserve-state`
| Flag | Backup | Delete state dir |
|------|--------|------------------|
| (default) | Yes | Yes |
| `--no-backup` | No | Yes |
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
### New flag: `--preserve-state`
| Flag | Backup | Delete state dir |
|------|--------|------------------|
| (default) | Yes | Yes |
| `--no-backup` | No | Yes |
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
### New flag: `--preserve-state`
| Flag | Backup | Delete state dir |
|------|--------|------------------|
| (default) | Yes | Yes |
| `--no-backup` | No | Yes |
The repository is presented as an uninstall-only skill, but this script performs installation by creating or updating a live symlink under ~/.cursor/skills/uninstaller. That mismatch is security-relevant because users may run it expecting safe cleanup behavior, while it instead alters agent skill loading state and can replace an existing skill path after deleting or moving prior content.
The skill metadata presents the capability as guidance, but this script actively schedules execution of a host-level uninstall. That mismatch is dangerous because users or higher-level orchestration may assume advisory behavior while the code performs a real destructive action asynchronously.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
case "$(uname -s)" in
Darwin)
launchctl bootout "gui/$UID/ai.openclaw.gateway" 2>/dev/null || true
rm -f ~/Library/LaunchAgents/ai.openclaw.gateway.plist
for f in ~/Library/LaunchAgents/com.openclaw.*.plist; do
[[ -f "$f" ]] && rm -f "$f"
done
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
case "$(uname -s)" in
Darwin)
launchctl bootout "gui/$UID/ai.openclaw.gateway" 2>/dev/null || true
rm -f ~/Library/LaunchAgents/ai.openclaw.gateway.plist
for f in ~/Library/LaunchAgents/com.openclaw.*.plist; do
[[ -f "$f" ]] && rm -f "$f"
done
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
launchctl bootout "gui/$UID/ai.openclaw.gateway" 2>/dev/null || true
rm -f ~/Library/LaunchAgents/ai.openclaw.gateway.plist
for f in ~/Library/LaunchAgents/com.openclaw.*.plist; do
[[ -f "$f" ]] && rm -f "$f"
done
;;
Linux)
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
;;
Linux)
systemctl --user disable --now openclaw-gateway.service 2>/dev/null || true
rm -f ~/.config/systemd/user/openclaw-gateway.service
systemctl --user daemon-reload 2>/dev/null || true
;;
esac
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
;;
Linux)
systemctl --user disable --now openclaw-gateway.service 2>/dev/null || true
rm -f ~/.config/systemd/user/openclaw-gateway.service
systemctl --user daemon-reload 2>/dev/null || true
;;
esac
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
# 6. macOS app
if [[ "$(uname -s)" == "Darwin" ]] && [[ -d "/Applications/OpenClaw.app" ]]; then
log "Removing macOS app"
rm -rf /Applications/OpenClaw.app || { log "ERROR: Failed to remove /Applications/OpenClaw.app"; ERRORS+=("macos-app"); }
fi
# Final report
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
# 6. macOS app
if [[ "$(uname -s)" == "Darwin" ]] && [[ -d "/Applications/OpenClaw.app" ]]; then
log "Removing macOS app"
rm -rf /Applications/OpenClaw.app || { log "ERROR: Failed to remove /Applications/OpenClaw.app"; ERRORS+=("macos-app"); }
fi
# Final report
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
# 6. macOS app
if [[ "$(uname -s)" == "Darwin" ]] && [[ -d "/Applications/OpenClaw.app" ]]; then
log "Removing macOS app"
rm -rf /Applications/OpenClaw.app || { log "ERROR: Failed to remove /Applications/OpenClaw.app"; ERRORS+=("macos-app"); }
fi
# Final report
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
# 6. macOS app
if [[ "$(uname -s)" == "Darwin" ]] && [[ -d "/Applications/OpenClaw.app" ]]; then
log "Removing macOS app"
rm -rf /Applications/OpenClaw.app || { log "ERROR: Failed to remove /Applications/OpenClaw.app"; ERRORS+=("macos-app"); }
fi
# Final report