Back to skill

Security audit

Openclaw Doc Helper

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only OpenClaw documentation helper that uses web lookups for official docs and does not request local execution, credentials, persistence, or sensitive access.

Installers should understand that this skill will steer OpenClaw-related answers toward official documentation and may activate when OpenClaw is being considered as part of a solution. It should not run local commands or access credentials; treat any suggested validation commands as user-controlled steps.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The trigger conditions are broad enough to activate this skill for loosely related requests, including generic solutioning or configuration discussions where OpenClaw is only tangentially involved. That can cause unintended web access to external documentation and steer responses toward this product even when a narrower or safer skill would be more appropriate.

Content

No source excerpt is available for this finding.

Behavior Manipulation

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Subtle instructions detected that may alter agent decision-making or introduce hidden biases.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

md
## Notes

- Always prefer official documentation over general knowledge
- If documentation is unclear or missing, say so and suggest checking the GitHub repo
- Keep answers concise but complete
- **Security Note**: This skill does NOT execute any local commands. Users must run validation commands themselves.

Static analysis

No suspicious patterns detected.