ClawHub
Back to skill

Security audit

Openclaw Chat

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a disclosed OpenClaw mobile/admin UI with mostly simulated controls, not artifact-backed malware.

Install only if you understand this appears to be a frontend/mobile admin panel or demo, not proven emergency recovery. Run it on a trusted local network, avoid exposing the Vite/PWA service publicly, and add authentication, confirmations, and clear data-retention rules before wiring these controls to real OpenClaw services or memory sync.

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill explicitly advertises remote management of local services, local port/app status monitoring, and automatic memory sync, but provides no warning about the security, privacy, or system-control implications. In a mobile chat/service-management context, these capabilities materially increase attack surface because users may expose internal services or sensitive agent memory without understanding the risk.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The UI wires destructive operations such as stopping OpenClaw, restarting the gateway, running doctor --fix, restoring a stable config, and triggering repair directly to click handlers without any confirmation dialog, secondary approval, or visible risk acknowledgment. In an admin/control-panel context, accidental taps or clickjacking-like interaction can immediately disrupt service availability or alter system state, making this a real safety and security issue.

Session Persistence

Medium
Category
Rogue Agent
Content
## Features

1. **OpenClaw Native Chat UI** - Mobile interface designed specifically for OpenClaw
2. **Agent Team Group Discussion** - Create groups for multi-agent collaboration
3. **Remote & Local Memory Sync** - Agent memory syncs automatically
4. **Integrated Remote Management UI** - Manage local services from anywhere
5. **Local Port & App Status Management** - Monitor and control local service status in real-time
Confidence
80% confidence
Finding
The description of automatic remote/local memory sync implies persistence and replication of agent state, which can include sensitive prompts, credentials, conversation history, or operational metadata. Because the file does not mention retention limits, encryption, access controls, or user consent, the persistence behavior poses a real privacy and data-leakage risk if deployed carelessly.

Static analysis

No suspicious patterns detected.