OpenClaw Agency Agents

• Analyzed: May 11, 2026, 7:13 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3c12433c111e9919a1db563941e1a7512a46428cc0b03479928181c7e9d3a716
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill manages AI personas by cloning an external GitHub repository (jnMetaCode/agency-agents-zh) and overwriting the agent's core configuration files (SOUL.md, IDENTITY.md, AGENTS.md). A vulnerability exists in scripts/activate.sh where the script extracts descriptions from external markdown files and inserts them into a shell heredoc (cat << EOF) without escaping; this allows for potential command injection if the source files contain shell-style variable expansion or command substitution (e.g., $(command)). While these behaviors align with the stated purpose of persona management, the combination of external content fetching and unsafe shell operations represents a significant security risk.