Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real OpenClaw troubleshooting skill, but it needs Review because it can perform repairs, run a background watchdog, persist on login, kill processes, archive session files, read credentials/logs, and send diagnostic details externally.
Install only if you intentionally want an OpenClaw repair/watchdog tool with local system access. Treat the watchdog, auto-repair, session archiving, Feishu/WebChat alerts, Gateway HTTP endpoint, and --install autostart as separate opt-in decisions. Review and redact diagnostic output before external notifications, avoid broad 'auto repair' invocations, and keep a rollback/uninstall path for the watchdog and registry autostart.
def _gateway_status() -> dict:
"""快速获取 Gateway 状态。"""
try:
r = subprocess.run(
[_OPENCLAW_CMD, "gateway", "status", "--json"],
capture_output=True, text=True, timeout=12, shell=True,
)for cmd in self.commands:
try:
logger.info("执行修复: %s -> %s", self.issue, cmd[:80])
result = subprocess.run(
["powershell", "-Command", cmd],
capture_output=True, text=True, timeout=60,
)"""Fallback when openclaw doctor hangs: use gateway status instead."""
items = []
try:
r = subprocess.run(
["openclaw", "gateway", "status", "--json"],
capture_output=True, text=True, timeout=15, shell=True,
)reg = r"HKCU:\Software\Microsoft\Windows\CurrentVersion\Run"
cmd = ['powershell', '-Command',
f'Set-ItemProperty -Path "{reg}" -Name "OpenClawWatchdog" -Value \'{py} {script}\'']
subprocess.run(cmd, check=True)
logger.info("开机自启已安装")
def uninstall_autostart():cmd = parts[1].lower() if len(parts) > 1 else ''
if pid != current_pid and '--status' in cmd:
logger.warning(f"清理残留 watchdog PID {pid} (wmic)")
subprocess.run(['taskkill', '/F', '/PID', str(pid)],
capture_output=True, timeout=5)
except (ValueError, subprocess.TimeoutExpired):
passVirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution