openclaw
Warn
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install the
openclawpackage from the global npm registry. - [COMMAND_EXECUTION]: The skill executes
openclaw onboard --install-daemon, which initiates a background service installation. This establishes system persistence and likely requires elevated user privileges to complete.
Audit Metadata