Security audit
Security checks across malware telemetry and agentic risk
This skill is not clearly malicious, but it can automatically restart an OpenClaw gateway and send status or diagnostics to external channels, so it needs careful review before installation.
Install only if you operate the OpenClaw gateway and want an agent to restart it on request. Review the config first, keep notification channels disabled unless needed, avoid generic webhooks unless you trust the destination, protect ~/.openclaw/.env, and require your own explicit confirmation process before allowing production restarts.
exec_args = shlex.split(actual)
if not exec_args:
raise ValueError("empty command after parsing")
result = subprocess.run(
exec_args,
shell=False,
capture_output=True,for k, v in headers.items():
cmd.extend(["-H", f"{k}: {v}"])
cmd.extend(["-d", body, url])
result = subprocess.run(cmd, capture_output=True, timeout=10)
return result.returncode == 0if not exec_args:
raise ValueError("empty command after parsing")
proc = subprocess.run(
exec_args, shell=False, capture_output=True, text=True, timeout=30,
)
output = proc.stdout.strip()"-sS",
"-X",
"POST",
f"https://api.telegram.org/bot{token}/sendMessage",
"-d",
f"chat_id={chat_id}",
"--data-urlencode",Use this skill when the task involves OpenClaw gateway restart, watchdog recovery, or post-restart reporting. 当任务涉及 OpenClaw 网关重启、看门狗恢复、重启后回报时使用。 Natural-language triggers (must auto-run, do not ask user for script commands): - "可以重启了" - "现在重启吧" - "restart now"
exec_args = shlex.split(actual)
if not exec_args:
raise ValueError("empty command after parsing")
result = subprocess.run(
exec_args,
shell=False,
capture_output=True,for k, v in headers.items():
cmd.extend(["-H", f"{k}: {v}"])
cmd.extend(["-d", body, url])
result = subprocess.run(cmd, capture_output=True, timeout=10)
return result.returncode == 0def dotenv_get(key):
env_file = os.path.expanduser("~/.openclaw/.env")
if not os.path.isfile(env_file):
return ""
with open(env_file, "r", encoding="utf-8") as f:auth_token = os.environ.get(auth_token_env, "") or dotenv_get(auth_token_env)
if not os.path.isfile(context_path) or os.path.getsize(context_path) == 0:
die(f"Restart context missing or empty: {context_path}\nWrite context first (write_context.py)")
if not oc_bin:
die("Cannot find 'openclaw' binary. Set paths.openclaw_bin or ensure it is in PATH.")66/66 vendors flagged this skill as clean.
No suspicious patterns detected.