Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward OpenClaw plugin-development helper with disclosed scaffold and validation scripts.
Install this only if you intend to build OpenClaw plugins. Review generated plugin code before installing it into OpenClaw, and be aware that installing any plugin can extend agent behavior, but this skill itself appears limited to scaffolding, examples, and validation.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
cat > "$PLUGIN_DIR/.gitignore" << 'EOF'
node_modules/
*.log
.env
.DS_Store
EOF
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
## **When to Use This Skill**
Invoke this skill when:
- A user wants to create a new OpenClaw plugin, tool, or command.
- A user asks for help with plugin development or integration.
- A user needs examples or templates for OpenClaw plugins.
- A user wants to validate their plugin structure.
The skill's invocation criteria are broad enough to match routine development help requests, which can cause the agent to invoke this skill in situations beyond narrowly scoped plugin-integration tasks. Over-broad triggering increases attack surface by routing generic requests through capability-bearing instructions that reference scripts, filesystem paths, and plugin workflows.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Use the init-plugin.sh script to create a new plugin scaffold:
~/.openclaw/skills/plugin-integration/scripts/init-plugin.sh <plugin-name>
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- A main JavaScript file (e.g., `index.js`).
### **`openclaw.plugin.json`**
| Field | Type | Description |
|--------------|----------|-------------------------------------------------------------------------------------------------|
| `name` | string | Name of the plugin (lowercase, hyphens only). |
| `version` | string | Version of the plugin (semver, e.g., `1.0.0`). |
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- A main JavaScript file (e.g., `index.js`).
### **`openclaw.plugin.json`**
| Field | Type | Description |
|--------------|----------|-------------------------------------------------------------------------------------------------|
| `name` | string | Name of the plugin (lowercase, hyphens only). |
| `version` | string | Version of the plugin (semver, e.g., `1.0.0`). |
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
echo "🦞 Creating OpenClaw plugin: $PLUGIN_NAME"
echo ""
# Create directory structure
mkdir -p "$PLUGIN_DIR"
# Create openclaw.plugin.json (correct manifest for OpenClaw plugins)
No suspicious patterns detected.