OpenClaw Deploy Guide

• Analyzed: Apr 2, 2026, 9:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 82eceb6b8918c067d4bcb926d7baf3494e51cf7843d8999379104ae6622921d3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill 'oc-deploy-guide' (SKILL.md) acts as a high-privilege deployment script that installs multiple software components, clones external GitHub repositories (e.g., OttoPrua/vid2md, OttoPrua/openclaw-wechat-bot), and modifies system configurations. Key indicators include the use of 'curl | bash' for tool installation, the addition of persistence via automated cron jobs for 'memory maintenance', and the modification of shell profiles (.zshrc). While these actions are aligned with the stated purpose of environment setup and include interactive confirmation gates, the broad shell execution and installation of remote artifacts represent a significant attack surface without explicit sandboxing.