Security audit
Security checks across malware telemetry and agentic risk
This Wake-on-LAN skill mostly does what it says, but it also installs a persistent message hook that can inspect all inbound OpenClaw messages and uses weak token practices.
Review before installing. Generate a unique hook token, avoid the hardcoded examples, prefer environment-based token passing, restrict permissions on OpenClaw config and WoL state files, and only enable the persistent hook service if you accept that it can inspect and locally log inbound OpenClaw messages.
print("\n🧪 运行测试...")
test_script = script_dir / 'test_wol.py'
if test_script.exists():
subprocess.run(['python3', str(test_script)], cwd=str(script_dir))
print("\n✅ 技能已就绪！")
return 0except ImportError:
print("⚠️ 正在安装 wakeonlan 库...")
try:
subprocess.run([sys.executable, '-m', 'pip', 'install', 'wakeonlan'], check=True)
print("✅ wakeonlan 库安装成功")
except Exception as e:
print(f"❌ 安装 wakeonlan 失败：{e}")64/64 vendors flagged this skill as clean.
Detected: suspicious.exposed_secret_literal, suspicious.secret_argv_exposure