ClawHub
Back to skill

Security audit

OCFT - OpenClaw File Transfer

Security checks across malware telemetry and agentic risk

Overview

This appears to be a disclosed peer-to-peer file transfer skill whose credential and network behavior fits its stated purpose, but users should handle auto-accept, secrets, and IPFS carefully.

Install only if you trust the npm package and need P2P file transfer. Keep node secrets and IPFS keys private, avoid enabling auto-accept except for trusted peers, restrict where received files are saved, and do not automatically execute received files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README explicitly documents secret-based auto-accept of incoming files, which removes human review and can lead to unsolicited file delivery and storage by any party that possesses or compromises a trusted secret. In an agent-to-agent file transfer skill, this is especially risky because secrets may be reused, leaked from logs/configs, or obtained from a compromised peer, enabling silent delivery of malicious payloads, disk-filling data, or files placed where downstream automation may process them.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly includes commands to display the full secret and to export or share connection information, but provides only minimal caution and no strong warning about credential exposure, replay, or impersonation risk. In a P2P trust model, these secrets appear to gate peer trust, so accidental disclosure in chat logs, screenshots, shell history, or copied URIs could allow unauthorized peer enrollment or spoofing.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill encourages enabling IPFS fallback and configuring third-party providers and API keys without clearly stating that file contents, hashes/CIDs, filenames/metadata, and access patterns may be exposed to external infrastructure. Because this skill is specifically for agent-to-agent file transfer, users may wrongly assume the transfer remains purely peer-to-peer and private when large files are offloaded to IPFS services.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.