Session History Enhanced

• Outcome: Review
• Latest audit: May 28, 2026, 10:49 AM
• Version:
  1.0.1

Overview

This skill is locally scoped and mostly purpose-aligned, but its delete flows can mislead users about whether chat transcripts are permanently deleted or archived.

Review before installing if your OpenClaw sessions contain private or important data. Fix the confirmation text and deleteTranscript flags so each delete action clearly matches what will happen to the transcript, and consider adding safer recovery or soft-delete behavior.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

• Confidence: 95% confidence
• Finding: The confirmation dialog tells the user the session entry will be deleted and the transcript archived, but the request actually sets deleteTranscript: true, which can permanently remove transcript data instead of preserving it. This is a security-relevant integrity and availability issue because users may authorize an action based on misleading UI text and unintentionally destroy audit/history data.

VirusTotal

66/66 vendors flagged this skill as clean.