ClawHub
Back to skill

Security audit

Olvid Channel

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a real Olvid messaging channel, but it deserves review because it handles private messages and credentials while pinning a reportedly vulnerable OpenClaw host version and storing the client key in config.

Review before installing. Use only on a patched OpenClaw host, verify the Olvid daemon target you configure, treat the client key as a secret that may be stored in OpenClaw config, and be aware that incoming attachments are written under /tmp/olvid-attachments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
97% confidence
Finding
The save logic is wrapped in `if (accountId === DEFAULT_ACCOUNT_ID)`, which makes the non-default account persistence branch unreachable. As a result, users configuring a non-default account may believe settings were saved when they were silently discarded, causing misbinding to the default account or fallback to environment-based credentials later.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The lockfile includes a git-based dependency source for libsignal resolved from GitHub over SSH rather than a normal registry package. Even though it is pinned to a commit, this bypasses normal npm registry controls and increases supply-chain risk through repository compromise, force-push/tag confusion in related workflows, SSH-based fetch behavior, and reduced provenance/auditability compared with registry-published artifacts. In a messaging/channel integration skill, this is more concerning because dependency compromise could expose message contents, credentials, or bot tokens.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The code collects a sensitive client key via prompt or environment variable and persists it into the returned configuration object without any indication of secure storage, masking, or user warning about how the secret will be handled. In a plugin onboarding context, this increases the risk of credential exposure through plaintext config files, logs, backups, or accidental sharing.

Known Vulnerable Dependency: openclaw==2026.2.6-3 — 10 advisory(ies): CVE-2026-53846 (OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency); CVE-2026-32064 (OpenClaw's andbox browser noVNC observer lacked VNC authentication); CVE-2026-32006 (OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallbac) +7 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
openclaw==2026.2.6-3

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.