T08 · Insecure Dependencies
Warning
- Location
SKILL.md:41- Finding
Persistent Redirection of npm to a Third-Party Package Registry
- Content
View full analysis
- Remediation
View remediation
Security audit
Openclaw Troubleshoot Cn
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Chinese OpenClaw troubleshooting guide, but it includes high-impact repair commands without enough safeguards.
Review before installing. The skill is not deceptive or self-executing, but users should avoid blindly running the sudo ownership changes, persistent npm registry change, kill -9, and OpenClaw reset commands. Prefer user-scoped Node/npm fixes, temporary registry overrides, environment variables for secrets, verified backups, and explicit rollback steps before using the higher-impact commands.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (3)
T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:33- Finding
Overbroad Ownership Change Makes System-Wide Node Modules User-Writable
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:127- Finding
Destructive Database and Configuration Resets Lack Adequate Safeguards
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (7)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The description and operational guidance are written entirely in Chinese, and the skill name suffix (
-cn) suggests a forced locale. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.- Content
Sudo/Root Execution
Medium
- Category
- Privilege Escalation
- Confidence
- 88% confidence
- Finding
The skill instructs users to run a recursive sudo chown over the npm directory. Privileged ownership changes can weaken local security boundaries, mask underlying permission problems, and if paths are mistyped or altered, affect more files than intended.
- Content
bash # 修复 npm 权限 sudo chown -R $(whoami) ~/.npm sudo chown -R $(whoami) /usr/local/lib/node_modules
Sudo/Root Execution
Medium
- Category
- Privilege Escalation
- Confidence
- 88% confidence
- Finding
This command recursively changes ownership of a system-wide Node modules directory using sudo, which can impact all users and packages on the machine. In a troubleshooting guide, such a fix may be copied without understanding the broader security and stability implications of modifying privileged installation paths.
- Content
bash # 修复 npm 权限 sudo chown -R $(whoami) ~/.npm sudo chown -R $(whoami) /usr/local/lib/node_modules网络超时
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill shows commands that transmit secrets to external services, including a Telegram bot token in a URL and a bearer API key in an HTTP header, without warning users about shell history, terminal logging, process inspection, or accidental sharing. While the commands are common for connectivity tests, they normalize handling credentials unsafely and can lead to token exposure.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 90% confidence
- Finding
The command sends a Telegram bot token to an external endpoint as part of the request URL. Although this is the expected API usage, presenting it without safety guidance can expose the token through shell history, copied terminal output, browser or proxy logs, and support transcripts.
- Content
bash # 测试连接 curl https://api.telegram.org/bot<YOUR_TOKEN>/getMeDiscord 连接失败
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 90% confidence
- Finding
The command transmits a live API key in an Authorization header to an external service. This is operationally normal for validation, but without warnings it can still leak through terminal recording, debug tooling, shared shell history, or copied logs.
- Content
bash # 验证 DeepSeek Key curl -H "Authorization: Bearer YOUR_KEY" \ https://api.deepseek.com/v1/models余额不足
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The troubleshooting guide includes destructive recovery actions such as resetting the database and configuration, but it does not clearly warn that these steps can cause irreversible data loss or service disruption. In a troubleshooting context, users may run such commands under stress and accidentally destroy working state or backups they still need.
- Content
Static analysis
No suspicious patterns detected.