Personalize Openclaw Webui Logo

• Outcome: Review
• Latest audit: Jun 24, 2026 · 12:38 PM UTC
• Version: 2.4.2

Overview

This skill customizes the OpenClaw browser-tab logo and includes a disclosed optional startup hook to restore that logo after upgrades.

Install this only if you want an agent to overwrite OpenClaw favicon files. Enable the auto-restore hook only if you are comfortable with a small startup hook under ~/.openclaw/hooks that can re-apply the chosen icon after upgrades; leave the hook uninstalled for one-time manual logo changes.

SkillSpector

Vulnerability Patterns

• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (16)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence
• Finding: This is a mismatch because most of the described favicon-personalization and optional auto-restore behavior is accurately represented, but two declared behaviors are not supported by the code as given. First, the description says it can 'update the logo library from a hub,' yet there is no code that downloads, syncs, or updates logo sets from any hub or remote source. Second, the description asserts it only triggers when the user explicitly mentions OpenClaw or Crawfish, but there is no trigger logic in the code and the declared trigger list is empty, so that restriction is not actually implemented here. There is no obvious hidden malicious behavior; the mismatch is due to unsupported claimed functionality and missing trigger gating.

Chaining Abuse

High

• Category: Tool Misuse

Content

# 4) favicon.ico (64x64)
write_ico "$MASTER" "$UI/favicon.ico" 64

[ -n "$CLEANUP" ] && rm -f "$CLEANUP"

# ---------- 5. Write applied-state stamp to STATE_DIR (publish-safe) ----------
# State lives outside the skill dir so the skill stays clean for skillhub/clawhub publish.

• Confidence: 75% confidence
• Finding: Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

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
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

iVBORw0KGgoAAAANSUhEUgAAAZAAAAGQCAYAAACAvzbMAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAOdEVYdFNvZnR3YXJlAEZpZ21hnrGWYwACcyRJREFUeAHsvQegdldVJrz2Pu/73v71mt6LEIIJTUQIAaSoYIFRsWEZ1HFQsWAZNWIBZH4bKBbAwug4og72CgxKUUSkhPSefPl6ve1t5+z9773Ws9Y+N/QSSMhZcHPv95ZT9jlnledZhaiTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk0466aSTTjrppJNOOumkk046+bjiqJMHtcRrrvE0P79A1/3n3npS76jDdKbn++Pe0vAojXccu/Vd71q98NZbx9RJJ59Fia961Qz98e/vptN2b0v35XzPNZHWx+vkhodp03nH3J/8yYQ6edBLZ0AehBKvuapH+7c8fHpy/IJ+b+bJo4OHz+wvLMy7ZDmo13OxqYnWJ5OwvjLuzc6vhar6QLV66q/oKV/7l+6lP7KPOunkMyzxmc+coX59Wb186jnVzNzjR8dPXTJYXNxKIfbT2z7Zj6RrYtOMR+NeM1luFhbf3avjm+jYyb91N998lDp5UEpnQB5EEl/1ohn6q3d/K1W9H5rObTq/2r6VYn+GXFVRdJ6oSh8KjsIkBRzj9DPKv0dEwxH5QFQfPBJntmy5Mawvv9ov1G9yb7v+IHXSyaco8XnPq+iuG76wWdj0Qk/hqyd13N6bm0n3oKcYQ/4EuZB+Nw3FkP5Or+X7MLrI9ymNpjQZj6fVaP3P++R/2N1xx13UyYNKOgPyIJF41aMePp5M/6R31hmXuJ17Yty6xdFght/LD2lMzySFFHmkBzVO0+9pQgjqJv1Of4/WiVZWidYSgjCexjiZujidrtKJU/+nP177RXfngRuxm3w/ROqkk48h2ZFp/ujtz66H9Y9Wu3Z9oZ/1js1DnazCJN1vKQJ26T6kbESyAcn3YBQDkiXfZBnRCnVNPtmW9L4bDUdj34SfnN2/739SJw8a6QzIg0Dioy571nBh9v8OLrhohs48jWh+MV259ACOhpQf2FhPydUhPZTT9Mwmo5GfU5+8wPTj00/2AN04GZS1IcXlVQrDNaomCVOYjFwYjxu3vPx71ZOe9qPut3+7gxI6+ZgSr3rs19TD4c/6HXsupaVFipWjmCLckKPcyYQyfBqnDfns0bDxSBaiSZEHG4/A96VL7+WIhNI9Gxv5nE82aLxWu2R5fmP+njv/G3XyoJDOgDzAJWHL56+vHv3gzLlnz8czziTqJbgqPagcUawsp+hiwh6fPLDpYc2/XfpMgrWo3yOamaM46JNLf7v0OmVjs7ZGgb+/Sn46ji44V+87eGqwe/vPuH9/3y9RJ53cR+JXXfXwZv/6a+PurY9zO7YSDQZEq+sU0z0U15NjMhwnB6aWqDcbiyY7NIEjj5gMBEcd+XXnOMSNdcx/8uddfi29V9cpOI49N6jcj8/dfvPLqZMHvHQG5AEu9Zde9bY48E8KW7eRn0mQ1XBIYXWNfDICmdvI0UWGrZx3/HBmxy5DzDH92/eyEeknniTxmHPJkMwOyM3OsTHJhiSspe+vrJBbX0+GpInNeOKq6egGf+D4892RI+/HIXSw1kNP7JrHb/qmhXDojl+uvf+vvbPOobgwx/cgHT9J8dQpcsPkwIxSBALoKjswGVLNxiJEJ1BW2hT7NV5sCxsSNizpHnWyt/ypJkUro/Tu+uYd9WnN8Cx3fcfRPdClMyAP
...[truncated 28 chars]

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

YARA rule 'privilege_escalation_tools': Privilege escalation tools and techniques [hacktools]

High

• Category: YARA Match

Content

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
...[truncated 28 chars]

• Confidence: 75% confidence
• Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

• Code: suspicious.dangerous_exec
• Location: hooks/logo-guard/handler.js:49