openclaw-server-secure-skill

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: a6aa8147ad665a0e6fb7fce6d270587b7995960e17efd8b7b4f1df8f7f87398c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for server hardening and OpenClaw installation, with most commands being benign security configurations. However, it uses a high-risk `curl -fsSL https://tailscale.com/install.sh | sh` command in `SKILL.md` to install Tailscale. While Tailscale is a legitimate service and the action aligns with the stated purpose, executing remote scripts directly via `curl | sh` is a significant security risk due to the potential for arbitrary code execution if the remote source were compromised or the URL tampered with, classifying it as suspicious rather than benign.