OpenClaw Windows Fix Scheduled Task Idle-Kill Bug Patch

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a visible Windows scheduled-task fix, but it recreates OpenClaw as an elevated persistent logon task without enough warning or rollback guidance.

Before installing, decide whether you really want OpenClaw Gateway to start automatically at logon with elevated Windows privileges. Back up the existing scheduled task, inspect the command that will run from %USERPROFILE%\.openclaw\gateway.cmd, and consider applying the manual idle-condition changes instead of recreating the task with /rl HIGHEST.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

OpenClaw Gateway, and anything invoked through its gateway.cmd file, may run with elevated Windows privileges each time the user logs in.

Why it was flagged

The instructions require administrator execution and create the OpenClaw Gateway scheduled task with highest privileges, which grants elevated authority beyond simply changing idle conditions.

Skill content
Right-click `FIX_TASK.bat` → **Run as Administrator** ... schtasks /create /tn "OpenClaw Gateway" ... /sc ONLOGON /rl HIGHEST /f
Recommendation

Only run this if you intentionally want OpenClaw Gateway to run elevated. Prefer a least-privilege task configuration if possible, inspect gateway.cmd first, and back up the existing scheduled task.

What this means

Any custom settings on the existing OpenClaw Gateway task could be lost, and the new task may behave differently than the user's previous setup.

Why it was flagged

The script force-deletes and force-recreates a Windows scheduled task, overwriting any existing task configuration without preserving or showing it.

Skill content
schtasks /delete /tn "OpenClaw Gateway" /f 2>nul ... schtasks /create /tn "OpenClaw Gateway" ... /f
Recommendation

Export or document the existing scheduled task before running the script, and manually review the exact schtasks command before approving it.

What this means

The OpenClaw gateway may keep running in the background more reliably and with higher privilege than the user expects.

Why it was flagged

The documented purpose is to keep the agent gateway running automatically and persistently, including across logons and idle periods.

Skill content
Runs at user logon ... Does NOT stop on idle ... schtasks /create /tn "OpenClaw Gateway" ... /sc ONLOGON /rl HIGHEST /f
Recommendation

Make sure persistent background operation is desired, and provide or keep clear disable/rollback instructions for the scheduled task.

What this means

Users have less source provenance to rely on when deciding whether to run administrator-level commands.

Why it was flagged

The privileged Windows fix is provided as instructions rather than a packaged script from a verifiable source; the script text is visible, but provenance is limited.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Treat the README script as the source of truth, review it carefully, and avoid running modified copies from other locations.