Agi Term Helper

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: agi-term-helper Version: 1.0.1 The `agi-term-helper` skill provides direct, unsanitized terminal execution via OpenClaw's `exec` tool, configured by `command-tool: exec` and `command-arg-mode: raw` in `SKILL.md`. While the documentation explicitly warns users about the risks of arbitrary command execution (e.g., avoiding `curl ... | sh`) and the skill is `disable-model-invocation: true` (preventing the AI agent from autonomously misusing it), this capability represents a significant security risk due to direct arbitrary command execution on the host system. This falls under 'risky capabilities without clear malicious intent' as per the classification guidelines.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you type a destructive or unsafe command, it can run with the permissions of your OpenClaw exec environment.

Why it was flagged

This exposes raw terminal execution, which can affect files or system state, but it is the stated purpose of the skill and is explicitly user-directed.

Skill content
whatever you type after `/term` is forwarded **as-is** to OpenClaw’s `exec` tool
Recommendation

Use this only for commands you already understand, prefer read-only checks, and avoid putting secrets or remote install pipelines in commands.