Security audit
openclaw-update-researcher
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrow GitHub research helper that writes dated Markdown update reports and shows no hidden or unsafe behavior.
Before installing, confirm you are comfortable with the agent accessing GitHub and writing generated reports into report_v1/. Review generated reports for accuracy because the skill relies on current GitHub release/tag content.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.