openclaw-setup
Fail
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation guide instructs users to pipe remote shell and PowerShell scripts directly into interpreters (
curl | bashandiwr | iex) fromhttps://openclaw.ai.- [CREDENTIALS_UNSAFE]: The troubleshooting and configuration documentation includes commands to print sensitive environment variables such asANTHROPIC_API_KEYandOPENAI_API_KEY, as well as commands to retrieve authentication tokens from theopenclaw.jsonconfig file.- [PERSISTENCE]: The skill automates the creation of background services usinglaunchdon macOS andsystemdon Linux to ensure the application remains active across system restarts.- [COMMAND_EXECUTION]: The instructions involve broad process termination capabilities usingkillallandpkill, and the execution of arbitrary Node.js code vianode -efor environment diagnosis.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user messages and workspace files (AGENTS.md,SOUL.md) to drive agent logic without defined sanitization or boundary markers.
Recommendations
- AI detected serious security threats
Audit Metadata