Security audit
Web Fetch Fake-IP Workaround
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed, reversible workaround that locally patches older OpenClaw installs for fake-IP web_fetch failures.
Install only if you are using an older npm-global OpenClaw version affected by fake-IP web_fetch blocking. Run status and inspect before apply, confirm the target file is the expected OpenClaw runtime, keep the generated backups, and prefer the openclaw.json configuration fix on OpenClaw v2026.4.10 or later.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.