Openclaw Quick Start

ReviewAudited by ClawScan on May 10, 2026.

Overview

This quick-start skill is mostly a setup guide, but it asks the agent to install and configure OpenClaw plus unspecified skills while referencing a configuration script that is not included for review.

Treat this as a review-before-running setup helper. Ask it to show all commands and the full list of skills first, do not run any external configuration script that is not included for review, and only proceed if you understand what will be installed and how to undo it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Concern

ASI02: Tool Misuse and Exploitation

What this means

If followed as written, the agent could make persistent changes to the local system and OpenClaw environment, including installing unspecified skills.

Why it was flagged

The skill tells the agent to perform local setup and install multiple skills, but the artifacts do not define exact commands, sources, approval checkpoints, or limits.

Skill content

1. 检测 macOS/Linux 环境
2. 安装 OpenClaw（如未安装）
3. 配置基础模型
4. 安装 5 个必备 Skills
5. 运行验证测试

Recommendation

Before use, require the skill to show the exact commands, model configuration steps, and the names/sources of all five skills, and confirm each install action with the user.

Concern

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users may be directed to rely on an external or missing setup script whose contents, provenance, and safety cannot be verified from the submitted artifacts.

Why it was flagged

The skill advertises a configuration script, but the provided package contains only SKILL.md and skill.json with no install spec or script available for review.

Skill content

价格：¥49 | 包含：配置脚本 + 视频教程 + 微信支持

Recommendation

Include the referenced setup script in the package, pin any install sources, and document what it changes before asking users to run it.

Note

ASI08: Cascading Failures

What this means

A poor or unintended skill choice could influence later OpenClaw tasks or add capabilities the user did not expect.

Why it was flagged

Installing multiple skills can affect future agent behavior beyond the current quick-start session, even though this is related to the stated onboarding purpose.

Skill content

- 一键安装常用 Skills

Recommendation

List each skill before installation and explain why it is needed; let the user opt in or skip individual skills.