OpenClaw Updater v2

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 7:51 PM UTC
• Version: 1.0.0

Overview

This skill is a small, disclosed OpenClaw update helper; its main risk is that running the update command changes the installed OpenClaw version.

Install only if you want an agent-accessible helper for OpenClaw updates. Prefer using status/config checks freely, and require explicit approval before running `openclaw update run`, especially in automated workflows or when using a custom update-check URL.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Self-Modification

High

• Category: Rogue Agent
• Confidence: 85% confidence

Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · SKILL.md (reported line 15)May include surrounding context.

md

"id": "openclaw-update-skill",
              "kind": "skill",
              "path": "skills/openclaw-update",
              "label": "OpenClaw Update Skill",
            },
          ],
      },

Self-Modification

High

• Category: Rogue Agent
• Confidence: 85% confidence

Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.

md

"id": "openclaw-update-skill",
              "kind": "skill",
              "path": "skills/openclaw-update",
              "label": "OpenClaw Update Skill",
            },
          ],
      },

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill presents openclaw update run as a normal workflow step without an explicit warning that it will modify the installed agent software. In an agent-driven or automated context, this can lead to unintended self-updates, version drift, or execution of newly fetched code without adequate user confirmation or change-control review.

Content

No source excerpt is available for this finding.