Security audit
Openclaw Model Catalog Migration
Security checks for vulnerabilities and agentic risk
Overview
This skill gives scoped guidance for updating OpenClaw model configuration and does not show hidden or unrelated behavior.
Review the proposed model replacements before applying the config patch, because this skill can change which models agents use. Its instructions are otherwise scoped and transparent for that task.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.