OpenClaw Launcher

• Analyzed: Mar 31, 2026, 2:21 AM
• Findings: 1
• Version: 1.1.0
• Hash: eb1164332929c4bd9649a13769e75df6229323eecf957db121c0e42f5611aa23
• Source: palm
• External report: View on VirusTotal

Findings (1)

The openclaw-launcher skill bundle (SKILL.md) automates the creation of a Windows-to-WSL bridge using several high-risk techniques: it extracts a 40-character authentication token from a local configuration file (~/.openclaw/openclaw.json), modifies system-wide network settings using `netsh interface portproxy` (requiring administrative privileges), and creates hidden background processes while bypassing PowerShell execution policies. Although these actions are technically consistent with the stated goal of facilitating a one-click startup for the OpenClaw dashboard, the combination of credential extraction and administrative network manipulation represents a significant security surface.