ClawHub
Back to skill

Security audit

Security Network Hardening

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed OpenClaw/Linux network-hardening skill whose privileged firewall actions are expected for its purpose and gated by user approval.

Install only if you want an agent to review and harden a Linux OpenClaw host. Before approving fixes, confirm management access, allowed source IPs/subnets, backups, rollback steps, and any firewall, permission, OpenClaw config, or commit changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
fi

if [[ "${EUID}" -ne 0 ]]; then
  echo "Please run as root: sudo bash $0 $STAMP"
  exit 1
fi
Confidence
70% confidence
Finding
sudo

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
fi

if [[ "${EUID}" -ne 0 ]]; then
  echo "Please run as root: sudo bash $0 $STAMP"
  exit 1
fi
Confidence
80% confidence
Finding
run as root

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
need_cmd ss

echo '== UFW status =='
sudo ufw status verbose || true

echo
echo '== Listening ports =='
Confidence
70% confidence
Finding
sudo

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal