Context Doctor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  1.2.0

Overview

Context Doctor is a local diagnostic skill that reads OpenClaw context files and installed skill metadata to report token usage, with no evidence of hidden data sharing or destructive behavior.

Install this if you want a local OpenClaw context-usage report. Review any terminal, JSON, PNG, or SVG output before sharing it, because it may reveal local workspace paths, installed skill names, and the presence or size of personal context files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 95% confidence
• Finding: The skill instructs the agent to execute a local Python script and mentions additional image-generation behavior that may read environment variables, inspect workspace files, enumerate installed skills, invoke external binaries, and write a PNG file, yet no permissions are declared. This creates a trust and review gap: operators may approve or install the skill without realizing it needs shell, file read, file write, and environment access, increasing the chance of unintended data exposure or unsafe execution in sensitive workspaces.

VirusTotal

63/63 vendors flagged this skill as clean.