Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only setup skill for adding OpenClaw agents and Feishu bot routing, with disclosed but sensitive configuration steps users should handle carefully.
Install only if you intend to configure OpenClaw with additional Feishu bots. Back up ~/.openclaw/openclaw.json first, keep Feishu appSecret private, use restrictive allowlists, verify JSON and account IDs before restarting the gateway, and avoid committing the config file to version control.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir ~/.openclaw/workspace-名称
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir ~/.openclaw/workspace-名称
The skill description and instructions are entirely in Chinese, which effectively forces a specific language for users without opt-in or justification. The policy for natural-language content requires offering a language/locale choice or clearly documenting a justified locale constraint.
The skill instructs the user to collect and place sensitive Feishu credentials (appId and especially appSecret) into a local configuration file, but it provides no warning about secret handling, file permissions, or avoiding exposure in logs, screenshots, backups, or version control. In a skill whose core purpose is bot/account provisioning, this omission increases the chance of credential leakage and unauthorized control of the bot integration.
This markdown file contains user-facing natural language in Chinese, but it does not indicate that the skill is intended specifically for Chinese-speaking users or offer any language choice. Under the policy rule, forcing a specific language without opt-in can be a locale-policy concern.
The entire skill description and usage guidance are written in Chinese, and there is no indication that users may choose another language or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the policy criteria, this is a natural-language locale constraint presented without opt-in or justification.
The skill directs users to modify the primary OpenClaw configuration and restart the gateway, but does not warn that mistakes can disrupt existing agents, routing, or production bot connectivity. In this context the issue is operational rather than directly malicious, but unguarded service-impacting instructions can cause downtime or misrouting if applied blindly.
This JSON template includes user-facing names such as "主助手", "新助手", and later "新机器人", which indicate a fixed Chinese locale in natural-language values. Because the file does not document that the configuration is region-specific or offer any language/locale choice, it may violate the policy against forcing a specific language without user opt-in.
No suspicious patterns detected.