System Maintenance Test

• Outcome: Review
• Latest audit: Sep 12, 2026 · 3:13 AM UTC
• Version: 1.3.2

Overview

This skill appears intended for legitimate OpenClaw maintenance, but it asks users to run unreviewed mutable installers for high-impact scheduled cleanup, recovery, and service-control behavior.

Review before installing. This is not evidence of malware, but you should not run the one-click setup unless you trust the publisher and have inspected the exact scripts at a pinned commit or signed release. Confirm what cron jobs, cleanup paths, backup locations, service restarts, webhooks, and uninstall steps it will use, and test dry-run or status commands before enabling automation.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (3)

T08 · Insecure Dependencies

Error

• Location: SKILL.md:32

Finding

Execution of an Unpinned Remote Package

Content

View full analysis

Remediation

View remediation

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:37

Finding

Mutable Remote Repository Is Cloned and Its Installer Executed

Content

View full analysis

Remediation

View remediation

other

Warning

• Location: package.json:5

Finding

Declared Executable and Security-Critical Components Are Missing from the Artifact

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High

• Category: YARA Match
• Confidence: 75% confidence

Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 49)May include surrounding context.

ed)

bash

bunx clawhub@latest install system-maintenance

Method 2: GitHub Clone

bash

git clone https://github.com/jazzqi/openclaw-system-maintenance.git \
  ~/.openclaw/skills/system-maintenance
cd ~/.openclaw/skills/system-maintenance
chmod +x scripts/*.sh

One-Click Setup

bash

bash scripts/install-maintenance-system.sh

Verification

bash

# Check cron tasks
crontab -l | grep -i openclaw

# Test monitoring
bash scripts/real-time-monitor.sh --test

# Quick health check
bash scripts/daily-maintenance.sh --quick-check

🏗️ Layer 3: Architecture & Components

Maintenance Schedule

Frequency	Task	Description	Script
Every 5 min	Real-time Monitoring	Gateway monitoring & auto-recovery	real-time-monitor.sh
Daily 2:00 AM	Log Management	Log cleanup, rotation, compression	log-management.sh
Daily 3:30 AM	Daily Maintenance	Comprehensive cleanup & health checks	`

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The description advertises automated cleanup, auto-recovery, backup/rollback, and maintenance automation, but it does not clearly warn that these actions may modify system state, delete files, restart services, or affect availability. In a system-maintenance skill, omitting impact warnings increases the chance that a user will run potentially disruptive operations without informed consent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The one-click setup command invokes an installation script without an accompanying warning that it may install scheduled tasks, change maintenance behavior, alter permissions, or modify the host environment. Presenting a privileged, state-changing installer as a simple setup step can lead to unintended persistence and operational changes.

Content

No source excerpt is available for this finding.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 85% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 49)May include surrounding context.

Verification

bash

# Check cron tasks
crontab -l | grep -i openclaw

# Test monitoring
bash scripts/real-time-monitor.sh --test

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The emergency recovery examples include restoring from backup and forcibly restarting services, but they do not warn about possible downtime, rollback of recent changes, or process termination side effects. In an operational context, these commands can interrupt running workloads and create data consistency risks if executed casually.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.