Agent Templates System

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only guide for OpenClaw agent templates; it describes expected template-driven file and config writes but does not install or run code itself.

Before using a template to create an agent, review its JSON definition, especially workspace.files, memorySeeds, overwrite modes, workspace path overrides, and any clawhubUrl skill references. This skill itself is a guide, but the OpenClaw feature it documents can create or overwrite files when a user materializes a template.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

55/55 vendors flagged this skill as clean.

View on VirusTotal