Openclaw Gateway Fd Fix

• Outcome: Review
• Latest audit: May 28, 2026 · 3:49 AM UTC
• Version: 1.0.0

Overview

This looks like a legitimate OpenClaw repair helper, but it can bulk-delete workspace folders and persistently change a macOS LaunchAgent, so it needs careful review before use.

Install only if you are intentionally repairing OpenClaw Gateway on macOS. Before running `fix.sh`, inspect every listed `.venv` and `node_modules` directory and keep anything not easily recreated. Prefer moving large folders out of `~/.openclaw/workspace` over bulk deletion, and review the LaunchAgent backup and final plist before trusting the service restart.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill presents destructive `rm -rf` commands that delete directories under the user's workspace without any explicit warning about irreversible data loss, verification step, or confirmation prompt. Even if intended for troubleshooting, users may have important project environments or dependencies in those paths and could lose work unexpectedly.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

1. **Remove large directories from workspace**:
   ```bash
   # Never put these inside ~/.openclaw/workspace/:
   rm -rf ~/.openclaw/workspace/*/.venv
   rm -rf ~/.openclaw/workspace/*/node_modules
   # Move datasets/models/venvs to ~/Downloads/ or /tmp/
   ```

• Confidence: 90% confidence
• Finding: The wildcard path `~/.openclaw/workspace/*/` inside a recursive removal pattern broadens the blast radius and can affect multiple projects at once with minimal user scrutiny. In a one-click repair context, this is more dangerous because users are encouraged to run it quickly during an outage, increasing the chance of accidental deletion of valuable environments or mis-targeted paths.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

1. **Remove large directories from workspace**:
   ```bash
   # Never put these inside ~/.openclaw/workspace/:
   rm -rf ~/.openclaw/workspace/*/.venv
   rm -rf ~/.openclaw/workspace/*/node_modules
   # Move datasets/models/venvs to ~/Downloads/ or /tmp/
   ```

• Confidence: 90% confidence
• Finding: The wildcard path `~/.openclaw/workspace/*/` inside a recursive removal pattern broadens the blast radius and can affect multiple projects at once with minimal user scrutiny. In a one-click repair context, this is more dangerous because users are encouraged to run it quickly during an outage, increasing the chance of accidental deletion of valuable environments or mis-targeted paths.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

```bash
   # Never put these inside ~/.openclaw/workspace/:
   rm -rf ~/.openclaw/workspace/*/.venv
   rm -rf ~/.openclaw/workspace/*/node_modules
   # Move datasets/models/venvs to ~/Downloads/ or /tmp/
   ```
2. **Update LaunchAgent resource limits**:

• Confidence: 89% confidence
• Finding: The `rm -rf ~/.openclaw/workspace/*/node_modules` command recursively deletes dependency trees across all workspace subdirectories using a wildcard. While operationally motivated, it can still destroy important local state and is risky in documentation because users may adapt or mistype the path, causing larger filesystem damage.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

• Code: suspicious.destructive_delete_command
• Location: SKILL.md:51