OpenClaw Security Suite

Comprehensive security suite for OpenClaw skills. Includes static scanning (AST + keywords) and AI-powered semantic behavior review to detect malicious code.

This package appears to implement what it claims (static scanning + AI review) but there are several things to consider before installing: - Provenance: the source/homepage is unknown. Prefer packages with a known author or a public repository you can inspect. - Node requirement mismatch: SKILL.md expects the 'node' binary; ensure your runtime provides Node and that dependencies (@babel packages) are installed. - Data exposure: the 'review' action inserts full file contents into an LLM prompt (ctx.llm.generate). If your agent's LLM provider is external, any secrets or sensitive code will be sent to that provider. Only run 'review' on non-sensitive code or ensure the LLM provider and contract are acceptable. - Sandboxing limits: vm_runner.ts uses Node's node:vm; that is NOT a hardened sandbox for running untrusted code. The README notes they replaced vm2 with node:vm—that reduces guarantees against sandbox escapes. Do not use this skill to execute untrusted code expecting strong isolation. - Path scope: scanSkill reads all .ts/.js files in the provided directory. Don't point it at system or secrets directories (e.g., /, home, or /etc). - Auditing: before granting access, inspect the package source yourself (or in an isolated environment), verify package.json dependencies, and consider running scans in an isolated VM or container. Ask the author for a repository or signed releases if you need higher assurance. What would change my assessment to 'benign': an authoritative source/repo with history; clearer SKILL metadata (node requirement); removal or explicit limitation of sending full file contents to external LLMs (or an opt-in with clear warning); and a safer, documented sandboxing strategy (or avoiding execution entirely).

Type: OpenClaw Skill Name: openclaw-security-suite Version: 0.2.3 The skill provides security scanning and AI-assisted code review but exhibits high-risk behavior by allowing arbitrary file system access via the 'path' parameter in index.ts without sanitization. While this is aligned with its stated purpose, it could be exploited to read sensitive files (e.g., .env, /etc/passwd). Additionally, the bundle includes an insecure Node.js VM sandbox (scanner/vm_runner.ts) and a runtime guard (guard/runtime_guard.ts) that are defined but not integrated into the main execution flow, which is atypical for a production-ready security tool.