swarm-self-heal
Warn
Audited by Socket on Mar 27, 2026
1 alert found:
AnomalyAnomalyscripts/check.sh
LOWAnomalyLOW
scripts/check.sh
This snippet is not malicious by itself; it is a launcher that unconditionally executes `anvil_watchdog.sh` from `~/.openclaw/...` without integrity verification. The main concern is execution/integrity risk: if that user-local script is tampered with or replaced, the launcher will run the attacker’s code. Inspect `anvil_watchdog.sh` and verify how that file is installed/upgraded and whether its integrity is protected.
Confidence: 62%Severity: 56%
Audit Metadata