会话名称修改

• Outcome: Pass
• Latest audit: May 28, 2026 at 10:10 AM UTC
• Version:
  1.0.2

Overview

This skill transparently renames OpenClaw sessions by editing local session metadata, with ordinary caution needed because the change is persistent.

Install only if you are comfortable letting the agent modify OpenClaw’s local session metadata. Confirm the exact target session and new label before use, and consider backing up sessions.json first because the skill edits a persistent local data file directly.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrases are broad and include ordinary conversational requests like '改会话名' and '把这个会话叫 XXX', which can cause the skill to activate unintentionally during normal chat. Because this skill performs direct file modification to a persistent sessions.json store, accidental invocation can lead to unwanted metadata changes and confusion about session identity.

VirusTotal

65/65 vendors flagged this skill as clean.