Clawdbot Security Suite.Bak

• Analyzed: May 11, 2026, 6:37 AM
• Findings: 1
• Version: 1.0.0
• Hash: 38989c90fa460bea1e59c3001ab3b9f7da2800753a0ffb6a4dec300446574109
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill The Clawdbot Security Suite is a runtime protection tool for AI agents, but it is classified as suspicious due to a critical shell injection vulnerability in 'hooks/security-validator/handler.ts'. The hook uses 'execSync' to call a validation script with unsanitized tool arguments, allowing for arbitrary command execution via subshell expansion (e.g., $(command)). Additionally, inconsistencies between documentation and actual file names (e.g., 'security' vs 'security.sh') may cause the validator to fail-safe into an unprotected state. While the provided security patterns in 'patterns.json' are extensive and the tool's intent appears benign, these implementation flaws introduce significant security risks.