ClawHub
Back to skill

Security audit

OpenClaw Migrator

Security checks across malware telemetry and agentic risk

Overview

The skill appears to do the migration it promises, but importing an archive can change sensitive OpenClaw state and the archive extraction path needs review before normal use.

Install only if you are comfortable reviewing a migration tool that can restore sensitive agent state. Use strong passwords, keep archives private, import only archives you created or fully trust, back up the destination OpenClaw state first, and verify or update the archive dependencies before relying on it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The README encourages migration of agent config, memory, and skills and emphasizes security, but it does not warn users that these artifacts may contain highly sensitive data such as secrets, credentials, private memories, or untrusted skill code. It also does not explain that restore/import changes the local agent state and may reintroduce unsafe or malicious skills onto a new machine, which can lead to inadvertent exposure or execution of risky content.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "Lucas <lucas.xuan>",
  "license": "MIT",
  "dependencies": {
    "archiver": "^7.0.0",
    "tar": "^7.4.3",
    "fs-extra": "^11.2.0",
    "commander": "^12.0.0"
Confidence
90% confidence
Finding
"archiver": "^7.0.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "MIT",
  "dependencies": {
    "archiver": "^7.0.0",
    "tar": "^7.4.3",
    "fs-extra": "^11.2.0",
    "commander": "^12.0.0"
  }
Confidence
98% confidence
Finding
"tar": "^7.4.3"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
    "archiver": "^7.0.0",
    "tar": "^7.4.3",
    "fs-extra": "^11.2.0",
    "commander": "^12.0.0"
  }
}
Confidence
88% confidence
Finding
"fs-extra": "^11.2.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"archiver": "^7.0.0",
    "tar": "^7.4.3",
    "fs-extra": "^11.2.0",
    "commander": "^12.0.0"
  }
}
Confidence
86% confidence
Finding
"commander": "^12.0.0"

Known Vulnerable Dependency: tar==7.4.3 — 7 advisory(ies): CVE-2026-24842 (node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Trave); CVE-2026-26960 (Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in no); CVE-2026-23745 (node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Ins) +4 more

High
Category
Supply Chain
Confidence
99% confidence
Finding
tar==7.4.3

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.