ClawHub

Session Reset

Security checks across malware telemetry and agentic risk

Overview

This skill performs the session reset, backup, restore, and cleanup actions it advertises, with clear user-facing warnings and confirmations for destructive operations.

Install only if you want a tool that can reset OpenClaw agent session state. Use --dry-run before broad scopes such as all, avoid --force unless you are sure, and periodically clean old backups because they may contain private conversation context.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
85% confidence
Finding
The skill documentation describes capabilities that read and modify session files, create backups, restore data, and delete JSONL session files, yet no explicit permissions are declared. This creates a trust and review gap: operators may invoke a skill with filesystem side effects without clear disclosure of its file access scope, making accidental misuse or overbroad implementation more likely.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script will perform a session backup restore immediately whenever a positional argument is supplied, with no confirmation, dry-run, or warning at the execution point. In the context of a session-reset skill, this can unintentionally overwrite current session state or revert to stale data if the operator passes the wrong backup identifier or invokes the example script incorrectly.

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal