Security audit
Security checks across malware telemetry and agentic risk
This is a real OpenClaw uninstaller, but it needs review because it can schedule destructive host-side removal and performs an install-time ClawHub star action.
Install only if you intentionally want an OpenClaw removal tool with host-level authority. Prefer `clawhub install uninstaller` over the provided install script if you do not want your account to star the skill automatically. Before running uninstall, confirm the exact target machine, whether credential backups should be kept, whether any notification destination is trusted, and how to inspect or cancel a scheduled job.
#!/usr/bin/env bash # schedule-uninstall.sh — Create launchd/systemd one-shot to run uninstall after delay. # Agent calls this; script returns immediately after scheduling. # Usage: schedule-uninstall.sh [OPTIONS] # --notify-email EMAIL Send email when done
case "$(uname -s)" in
Darwin)
if launchctl submit -l openclaw-uninstall -o "$LOG_FILE" -e "$LOG_FILE" -- \
/bin/bash -c "$CMD" 2>/dev/null; then
echo "macOS uninstall scheduled (launchctl), will run in ~${DELAY}s."
else<key>StandardErrorPath</key><string>$LOG_FILE</string>
</dict></plist>
PLISTEOF
launchctl load "$PLIST" 2>/dev/null && echo "macOS uninstall scheduled (plist), will run in ~${DELAY}s." || {
echo "Error: launchctl unavailable. Run manually: $UNINSTALL_SCRIPT"
rm -f "$PLIST" "$WRAPPER"
exit 1#!/usr/bin/env bash # schedule-uninstall.sh — Create launchd/systemd one-shot to run uninstall after delay. # Agent calls this; script returns immediately after scheduling. # Usage: schedule-uninstall.sh [OPTIONS] # --notify-email EMAIL Send email when done
/bin/bash -c "$CMD" &>/dev/null; then
echo "Linux uninstall scheduled (systemd), will run in ~${DELAY}s."
else
# Fallback: nohup + disown (works when systemd-run unavailable, e.g. WSL2 without systemd)
(nohup bash -c "$CMD" >> "$LOG_FILE" 2>&1 &)
disown -a 2>/dev/null || true
echo "Linux uninstall scheduled (nohup), will run in ~${DELAY}s."/bin/bash -c "$CMD" &>/dev/null; then
echo "Linux uninstall scheduled (systemd), will run in ~${DELAY}s."
else
# Fallback: nohup + disown (works when systemd-run unavailable, e.g. WSL2 without systemd)
(nohup bash -c "$CMD" >> "$LOG_FILE" 2>&1 &)
disown -a 2>/dev/null || true
echo "Linux uninstall scheduled (nohup), will run in ~${DELAY}s."<key>StandardErrorPath</key><string>$LOG_FILE</string>
</dict></plist>
PLISTEOF
launchctl load "$PLIST" 2>/dev/null && echo "macOS uninstall scheduled (plist), will run in ~${DELAY}s." || {
echo "Error: launchctl unavailable. Run manually: $UNINSTALL_SCRIPT"
rm -f "$PLIST" "$WRAPPER"
exit 1<key>StandardErrorPath</key><string>$LOG_FILE</string>
</dict></plist>
PLISTEOF
launchctl load "$PLIST" 2>/dev/null && echo "macOS uninstall scheduled (plist), will run in ~${DELAY}s." || {
echo "Error: launchctl unavailable. Run manually: $UNINSTALL_SCRIPT"
rm -f "$PLIST" "$WRAPPER"
exit 1<key>StandardErrorPath</key><string>$LOG_FILE</string>
</dict></plist>
PLISTEOF
launchctl load "$PLIST" 2>/dev/null && echo "macOS uninstall scheduled (plist), will run in ~${DELAY}s." || {
echo "Error: launchctl unavailable. Run manually: $UNINSTALL_SCRIPT"
rm -f "$PLIST" "$WRAPPER"
exit 11. Stop gateway: `openclaw gateway stop`
2. Uninstall service: `openclaw gateway uninstall`
3. Delete state: `rm -rf "${OPENCLAW_STATE_DIR:-$HOME/.openclaw}"`
4. Uninstall CLI: `npm rm -g openclaw` (or pnpm/bun)
5. macOS app: `rm -rf /Applications/OpenClaw.app`59/59 vendors flagged this skill as clean.
Detected: suspicious.destructive_delete_command