Back to skill

Security audit

openclaw-docs-online

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation helper that tells the agent to verify OpenClaw answers against official docs, with no executable code or hidden data access.

Install this if you want an OpenClaw documentation assistant that uses web access to verify answers. Review any commands it suggests before running them, especially examples involving configuration files, restarts, Docker deployment, local APIs, or production security settings.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.