OpenClaw Security Audit

⚠️ HIGH PRIVILEGE SECURITY AUDIT SKILL Performs comprehensive security auditing for OpenClaw deployments. Requires system-level access for legitimate securit...

This skill appears to be a legitimate high-privilege audit tool, but it carries inherent sensitivity because it reads many system files and process environments. Before installing or running: (1) review the full script contents yourself (or have a trusted reviewer) because it runs many system inspections; (2) do not enable Git/Telegram options unless you understand what will be committed or sent (these are opt-in but will transmit data to remote endpoints if enabled); (3) run audits on systems you own/trust and avoid running as root unless needed (script will warn if root); (4) consider running in an isolated/test environment first to verify outputs; (5) if you need higher assurance, ask the author for reproducible build provenance or a signed release. Confidence is medium because the provided code was only partially visible in the prompt — review the full shipped script before trusting it with sensitive systems.

Type: OpenClaw Skill Name: security-audit-openclaw Version: 1.0.2 The skill performs high-privilege security auditing that includes several high-risk behaviors: scanning the workspace for plaintext private keys and mnemonics (DLP), reading sensitive environment variables from the /proc filesystem, and optionally exfiltrating the entire OpenClaw state directory (which may contain API keys and session data) to a remote Git repository. While these actions are documented in SKILL.md and SECURITY.md as legitimate auditing and backup functions, and external communication (Git/Telegram) is disabled by default, the broad system access and potential for data exposure via hardcoded endpoints (api.telegram.org) warrant a suspicious classification. Key files involved are scripts/openclaw_security_audit.py and SKILL.md.