OpenClaw Direct Setup

One-click OpenClaw installer with security hardening. No Docker required - runs directly on Windows, macOS, and Linux.

This installer is coherent with its stated purpose, but it performs multiple network installs and executes downloaded code: (1) it runs a remote install script from ollama.com via curl | sh, (2) runs npm -g installs, and (3) pulls models and GitHub skills (clawhub install). These actions can pull arbitrary code onto your machine. Before running it, consider: - Review the remote install scripts and the npm/GitHub packages being installed (openclaw, clawhub, ningtoba/pc-assistant, event-monitor, and the named model). - Prefer running in an isolated environment (VM or disposable machine) or inspect the scripts line-by-line. - Be cautious about giving sudo for firewall changes; the script may prompt for sudo when modifying system firewall. - If you rely on sensitive local data or secrets, do not run unverified installers on your main workstation. - If you decide to proceed, keep backups and monitor network/activity during the first run. If you want, I can list the exact network calls and packages the scripts will fetch and explain what to look for on those upstream endpoints.

Type: OpenClaw Skill Name: openclaw-direct Version: 1.0.0 The bundle is a legitimate installer for the OpenClaw platform, incorporating several security-hardening features such as localhost-only binding (127.0.0.1), root-user detection to prevent execution with elevated privileges, and the explicit disabling of sensitive commands like 'exec' and screen recording in the generated configuration (create-config.js). While the setup script (setup.sh) utilizes global npm installations and the official Ollama installer, these actions are consistent with the stated purpose of a system-wide tool setup and show no signs of malicious intent or data exfiltration.