ClawHub
Back to skill

Security audit

OpenClaw Tailscale Remote Access

Security checks across malware telemetry and agentic risk

Overview

This remote-access setup skill appears purpose-aligned, but it handles gateway credentials and diagnostic output in ways users should review carefully before installing.

Install only if you are comfortable giving this skill authority over OpenClaw gateway remote-access configuration. Treat the gateway token as a secret, avoid passing it on the command line, restrict config file permissions, and do not share diagnostic output unless you have checked it for tokens, hostnames, device IDs, and pairing details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill instructs the agent to read and modify configuration files, restart services, and make networked changes via Tailscale, but it does not declare any permissions. That creates a trust and consent gap: an orchestrator or reviewer may treat the skill as lower-risk than it really is, even though it can change system state and network exposure.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The README instructs users to place a sensitive gateway token in an environment variable but does not warn about secure handling, lifetime, or exposure risks. Environment variables can be disclosed through shell history, process inspection, logs, crash reports, or inherited subprocess environments, so normalizing this practice without safeguards increases the chance of credential leakage.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script accepts a gateway token via a command-line argument and then writes that token into the JSON config file. Command-line arguments are commonly exposed through process listings, shell history, job control logs, and automation tooling, while persisting the token in plaintext increases the chance of credential disclosure from backups, logs, or local file reads. In this remote-access context, exposure of the gateway token could allow unauthorized access or reconfiguration of the OpenClaw gateway.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script prints the full OpenClaw configuration and pending pairing request data directly to stdout, which can expose sensitive local information such as service configuration, device metadata, tokens, hostnames, or pending access details. In the context of a remote-access troubleshooting skill, this is more dangerous because users are likely to share command output with an operator, paste it into chats, or store it in logs, increasing the chance of unintended disclosure.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.