ClawHub
Back to skill

Security audit

OpenClaw Windows Fix Scheduled Task Idle-Kill Bug Patch

Security checks across malware telemetry and agentic risk

Overview

This is a visible troubleshooting guide for fixing an OpenClaw Windows scheduled task, though it requires users to manually run an administrator script that changes persistent startup behavior.

Review the batch commands before running them. Only use the script if you intend to replace the existing "OpenClaw Gateway" scheduled task and let it start at logon with highest privileges; export or note your current task settings first if you have customized them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill instructs users to run an administrator-level batch script before clearly warning that it will delete and recreate a Windows Scheduled Task. Even if intended as a legitimate fix, this is a system-level persistent change that can disrupt existing task configuration, elevate execution privileges, and cause users to execute sensitive commands without informed consent.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.