openclaw-upgrade
Warn
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
sudofor global NPM installations and system-level operations, granting the skill root-level control over the host environment. - [CREDENTIALS_UNSAFE]: Accesses and replicates sensitive user data stored in
~/.openclaw/credentialsand~/.openclaw/sessionsduring the backup phase. - [COMMAND_EXECUTION]: The
upgrade.shscript automates the deletion of thenode_modulesdirectory (rm -rf) if specific error signatures are detected in system logs viajournalctl, which is a risky pattern that could be triggered by log poisoning. - [REMOTE_CODE_EXECUTION]: Installs and executes code from the NPM registry and the OpenClaw GitHub repository, which may execute arbitrary scripts during the installation process.
- [EXTERNAL_DOWNLOADS]: Fetches source code and packages from external repositories including GitHub and the NPM registry to perform software updates.
Audit Metadata