Agent Create Config

• Analyzed: Mar 21, 2026, 2:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: cce5009cfff68306ed84f58363d718357f4b4c024b728e4c9661ba25a7fe0616
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates the creation and configuration of OpenClaw agents, which requires high-risk capabilities including shell command execution (e.g., `mkdir`, `cat`, `openclaw gateway restart`) and direct modification of configuration files and workspaces in the user's home directory (`~/.openclaw/`). It also handles sensitive credentials such as Feishu/Lark bot tokens and app secrets. While these behaviors are aligned with the stated purpose of agent setup, the broad filesystem access and instructions for agents to act autonomously without seeking permission ("不要问许可，直接做" in `references/MERGED_PROCESS.md`) present a significant security risk and attack surface.