Safe Exec

Safe command execution for OpenClaw Agents with automatic danger pattern detection, risk assessment, user approval workflow, and audit logging. Use when agen...

Install only if you are comfortable letting this skill execute shell commands with your user privileges. Keep SAFE_EXEC_AUTO_CONFIRM and OPENCLAW_AGENT_CALL bypass flows off for untrusted workflows, do not rely on the audit log as tamper-proof, avoid passing secrets in prompts/context, and use OS/container sandboxing for destructive or privileged command work.

Type: OpenClaw Skill Name: safe-exec Version: 0.3.4 The 'safe-exec' skill is presented as a security tool to intercept and require approval for dangerous shell commands executed by an AI agent. Its documentation (SKILL.md, READMEs, CLAWDHUB_SECURITY_RESPONSE.md) explicitly states no network calls, monitoring, or credential requirements, and the developer has actively removed previously problematic features. However, the core scripts (`scripts/safe-exec.sh` and `scripts/safe-exec-approve.sh`) use `eval "$COMMAND"` to execute commands. This is a critical shell injection vulnerability, as a sophisticated attacker could potentially bypass the risk assessment regexes or manipulate the command string to achieve arbitrary code execution, even for commands deemed 'low' risk or after user approval. Despite the clear intent to provide a security layer, this significant RCE risk makes the skill suspicious.