Security audit
OpenClaw Permissions Audit
Security checks for vulnerabilities and agentic risk
Overview
This skill reads OpenClaw configuration to produce a masked permissions report, and its sensitive access is disclosed and aligned with that audit purpose.
Install this only if you want an agent to inspect local OpenClaw configuration and identity files. The skill is designed to mask secrets, but the generated report may still reveal sensitive operational details such as enabled channels, permission scopes, gateway settings, and partial IDs, so review it before sharing.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.