The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs users to download and execute a script from an external repository during the installation process: git clone https://github.com/coollabsio/openclaw.git && ./docker-setup.sh. Executing remote scripts from sources outside the trusted vendor list poses a significant security risk.
[PRIVILEGE_ESCALATION]: Several tasks require administrative privileges via sudo, including system-level operations like swap file creation (sudo fallocate -l 4G /swapfile), file ownership modification (sudo chown -R 1000:1000 /path/to/openclaw-data), and firewall configuration (sudo ufw allow 8080/tcp).
[EXTERNAL_DOWNLOADS]: The skill downloads software from external registries, including Node.js packages (npm install -g openclaw@latest) and system packages (apt-get install -y docker-ce-cli docker-compose-plugin), which may introduce supply chain vulnerabilities.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Untrusted data enters the system through integrated messaging channels such as Telegram, Discord, Slack, and WhatsApp.
Boundary markers: There are no instructions for implementing boundary markers or "ignore embedded instructions" warnings for the incoming data.
Capability inventory: The gateway possesses significant capabilities, including routing messages to multiple LLM providers and performing browser automation.
Sanitization: The configuration guide does not provide details on sanitizing or filtering incoming messaging data before it is processed by the AI models.
[DYNAMIC_EXECUTION]: The skill documents the BROWSER_EVALUATE_ENABLED=true setting, which enables arbitrary JavaScript execution within a browser context. While explicitly identified as a security risk in the documentation, it remains an available dynamic execution vector.
[COMMAND_EXECUTION]: The documentation relies on the agent or user executing multiple shell commands for health checks and status monitoring, such as docker exec openclaw openclaw doctor --fix and docker exec openclaw openclaw status --all.

openclaw