Security checks across malware telemetry and agentic risk
This appears to be a purpose-built restart tool rather than malware, but it gives an agent broad restart, diagnostic-command, and external-notification authority that needs careful review.
Install only if you want an agent to restart the OpenClaw gateway from natural-language requests. Before enabling it, require an explicit confirmation step, restrict who can edit the restart config and context files, keep external notification channels minimal, avoid generic webhooks unless necessary, and review what diagnostics may be collected and sent.
exec_args = shlex.split(actual)
if not exec_args:
raise ValueError("empty command after parsing")
result = subprocess.run(
exec_args,
shell=False,
capture_output=True,if not exec_args:
raise ValueError("empty command after parsing")
proc = subprocess.run(
exec_args, shell=False, capture_output=True, text=True, timeout=30,
)
output = proc.stdout.strip()66/66 vendors flagged this skill as clean.