openclaw-admin-vue
Fail
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCEDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and immediately execute a remote installation script via curl piped to bash from an untrusted GitHub repository (
curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash). This is a high-severity RCE vulnerability. - [EXTERNAL_DOWNLOADS]: The skill downloads code and dependencies from untrusted sources, including cloning a repository from an unverified GitHub account (
itq5/OpenClaw-Admin.git). - [COMMAND_EXECUTION]: The skill involves the execution of various sensitive shell commands for environment setup, package installation (
npm install), and starting background processes viapm2andhermes gatewaycommands. - [CREDENTIALS_UNSAFE]: The documentation directs users to store highly sensitive API keys (e.g.,
ANTHROPIC_API_KEY,OPENROUTER_API_KEY,API_SERVER_KEY) in plaintext environment files (~/.hermes/.env). - [PERSISTENCE]: Static analysis detected patterns indicating attempts to access
crontab, which is a standard method used by malicious software to maintain persistence on a target system. - [DATA_EXFILTRATION]: Static detectors flagged the skill for potential unauthorized access to sensitive file paths, including SSH and AWS configuration directories (~/.ssh, ~/.aws).
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata