Security audit
Security checks across malware telemetry and agentic risk
The skill has a legitimate Umbrel/OpenClaw admin purpose, but it can automatically rewrite local OpenClaw service settings with broad service discovery and weak safeguards.
Install only on an Umbrel/OpenClaw host you control. Review the scripts and the bundled umbrel_services.json before running sync commands, back up OpenClaw config first, prefer dry-run or discovery-only modes where available, and do not run the updater against mappings from an untrusted source.
def run_command(cmd: str) -> str:
"""Run a shell command and return output."""
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, check=True)
return result.stdout.strip()
except subprocess.CalledProcessError as e:
return f"ERROR: {e.stderr.strip()}"def run_command(cmd: str) -> str:
"""Run a shell command and return output."""
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, check=True)
return result.stdout.strip()
except subprocess.CalledProcessError as e:
print(f"Command failed: {cmd}")65/65 vendors flagged this skill as clean.
No suspicious patterns detected.