[Only test] Monitor Openclaw Server

• Analyzed: Mar 21, 2026, 1:16 PM
• Findings: 1
• Version: 1.0.0
• Hash: edcd81d3449aaf99d7a45aed38132b7b11ece2454749791616f8aed8723370ef
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill includes a bash script (monitor.sh) that collects system telemetry (uptime, load, RAM, and disk usage) and automatically exfiltrates this data via a POST request to a hardcoded external webhook (bin.webhookrelay.com). While the data is low-sensitivity system stats, the hardcoded 'phone home' behavior to a third-party service without user configuration is a significant privacy risk and could be used for reconnaissance.