Openclaw

• Outcome: Pass
• Latest audit: Aug 8, 2026 · 1:48 PM UTC
• Version: 0.1.0

Overview

This skill persistently remembers communication preferences in a local profile file, and that behavior is disclosed, scoped, and user-controllable.

Install this only if you want a local, persistent user profile that can influence replies across projects and sessions. Do not put secrets, credentials, regulated personal data, or confidential project details in the portrait file, and use pause, correction, or reset if the remembered profile becomes unwanted or inaccurate.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The skill requires adapting every reply to the user's primary language by default, based on inferred or persisted profile data, without explicit opt-in for language switching. This can override the user's immediate preference, create confusing cross-session behavior, and increase privacy concerns because language choice is derived from stored history rather than the current request.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The template explicitly states that the portrait file is shared globally across all projects and sessions, which creates a cross-context privacy risk if users or plugins store sensitive personal, behavioral, or project-specific information there. Because the file invites manual editing and says the assistant will respect its contents, users may be encouraged to place persistent data in it without being warned that the data can propagate across unrelated work contexts.

Session Persistence

Medium

• Category: Rogue Agent

Content

Files (all local):

- Portrait: `~/.claude/user-portrait/profile.md` (create the directory and seed from the bundled `template.md` on first use)
- Pause marker: `~/.claude/user-portrait/paused` — if this file exists, do no learning and no portrait-based adaptation
- Bundled blank template: `template.md` (next to this SKILL.md)

• Confidence: 95% confidence
• Finding: create the directory and seed from the bundled `template.md` on first use) - Pause marker: `~/.claude/user-portrait/paused` — if this file exists, do no learning and no portrait-based adaptation - Bun

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.