Heartbeat Ollama Guard

• Analyzed: May 16, 2026, 7:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3fb19b37b5f31ec61578ce1a25fa4e5b3fc8dac6864dba91919898c34e99c123
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a configuration 'guard' that uses high-risk capabilities to ensure OpenClaw settings remain pointed to a local Ollama model. Specifically, 'heartbeat_ollama_guard.py' installs a persistent background daemon via macOS LaunchAgents or Linux systemd and automatically reverts modifications to 'openclaw.json' files. While these actions align with the stated purpose, the use of persistence and automated file overwriting is inherently risky. Furthermore, the daemon's notification logic is vulnerable to AppleScript injection because it passes unsanitized configuration values directly into an 'osascript' command.