Security audit
Security checks for vulnerabilities and agentic risk
The skill is a disclosed OpenClaw session cleanup helper, but it tells agents to run an unbundled local cleanup script that can change or delete persistent session data.
Install only if you understand which OpenClaw sessions will be removed. Before running it, inspect the actual cleanup.ps1 script from your environment, run a dry-run first, back up sessions.json and .jsonl history files, and avoid -CleanJsonl unless you intentionally want to delete conversation history.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: openclaw-session-cleanup
description: >
Clean up accumulated subagent and cron:run child sessions in OpenClaw to fix slow subagent startup.
The skill uses broad symptom-based activation cues like 'subagents are slow to start' and 'gateway slow' without requiring validation that session accumulation is actually the cause. This can cause the agent to invoke a maintenance/destructive cleanup workflow in situations where the symptoms stem from unrelated issues, increasing the chance of unnecessary operational changes or data loss if dangerous flags are used.
The Chinese guidance makes activation effectively mandatory whenever the user mentions several broad symptoms, but those symptoms are not specific to this root cause. That creates a prompt-selection vulnerability where the agent may over-trigger a cleanup procedure and perform risky maintenance based on weak evidence.
No suspicious patterns detected.