Agi Term Helper
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: agi-term-helper Version: 1.0.1 The `agi-term-helper` skill provides direct, unsanitized terminal execution via OpenClaw's `exec` tool, configured by `command-tool: exec` and `command-arg-mode: raw` in `SKILL.md`. While the documentation explicitly warns users about the risks of arbitrary command execution (e.g., avoiding `curl ... | sh`) and the skill is `disable-model-invocation: true` (preventing the AI agent from autonomously misusing it), this capability represents a significant security risk due to direct arbitrary command execution on the host system. This falls under 'risky capabilities without clear malicious intent' as per the classification guidelines.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you type a destructive or unsafe command, it can run with the permissions of your OpenClaw exec environment.
This exposes raw terminal execution, which can affect files or system state, but it is the stated purpose of the skill and is explicitly user-directed.
whatever you type after `/term` is forwarded **as-is** to OpenClaw’s `exec` tool
Use this only for commands you already understand, prefer read-only checks, and avoid putting secrets or remote install pipelines in commands.
