ClawHub
Back to skill

Security audit

OpenClaw Setup Assistant

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed VPS setup and hardening guide with expected admin-level actions, but users should take normal lockout and credential precautions.

Before using this skill, keep an existing admin SSH session open, confirm console or recovery access to the VPS, back up SSH and firewall configuration, and verify where API keys and messaging bot tokens will be stored. The skill is appropriate for server setup, but firewall, SSH, cron, and backup changes can affect access and availability if applied without a rollback plan.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill describes actions like firewall changes, SSH authentication hardening, user/account changes, service binding, and automation setup, but it does not prominently warn that these steps can lock operators out of the VPS or temporarily disrupt services. In a server-setup context, omission of access and availability risk is meaningful because users may run the skill without preparing fallback access, backups, or maintenance windows.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
## Requirements

- Ubuntu 22.04+ or Debian 12+ VPS
- SSH access (root or sudo user)
- AI provider API key (Anthropic, OpenAI, or Google)
- Messaging platform bot token (optional)
Confidence
70% confidence
Finding
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Static analysis

No suspicious patterns detected.