installation
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONPERSISTENCEREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads deployment configurations, Kubernetes manifests, and release binaries from the project's repository on GitHub (
github.com/openclaw) and its Helm chart repository (charts.openclaw.io). - [COMMAND_EXECUTION]: Provides instructions for running system status checks, container orchestration with Docker Compose, and Kubernetes cluster management commands.
- [CREDENTIALS_UNSAFE]: References weak default passwords for the database (
root123,openclaw123) and the administrative dashboard (admin123) as part of the initial setup instructions. - [PRIVILEGE_ESCALATION]: Includes commands for writing to system service directories and managing systemd units, which requires administrative privileges.
- [PERSISTENCE]: Details the setup of systemd services to ensure the application starts automatically on system boot.
- [REMOTE_CODE_EXECUTION]: Downloads release binaries and executes startup shell scripts (
openclaw-server.sh,openclaw-worker.sh) as part of the native installation process.
Audit Metadata