Security audit
Agent Templates System
Security checks for vulnerabilities and agentic risk
Overview
This is a documentation-only guide for OpenClaw agent templates; it describes expected template-driven file and config writes but does not install or run code itself.
Before using a template to create an agent, review its JSON definition, especially workspace.files, memorySeeds, overwrite modes, workspace path overrides, and any clawhubUrl skill references. This skill itself is a guide, but the OpenClaw feature it documents can create or overwrite files when a user materializes a template.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.