openclaw-parallels-smoke

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly tells the guest updater to fetch and install an HTTP-served package at runtime using the URL template "http://:/openclaw-.tgz", which downloads remote code that will be executed as part of the update verification.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running installs and update scripts as root (and using sudo fallbacks) and to use Windows PowerShell with -ExecutionPolicy Bypass, which directs the agent to obtain elevated privileges and bypass security controls that modify the host/guest system state.