gateway-restart

Warn

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes administrative shell commands (openclaw gateway restart, openclaw cron list) to manage system services. It also supports remote execution via SSH (ssh -o ConnectTimeout=10 <host> <command>), which allows the agent to perform actions on other machines in the network if SSH keys are present. While appropriate for a service management tool, these capabilities could be misused if the agent is given a malicious instruction to target unauthorized hosts.
  • [COMMAND_EXECUTION]: The script uses shlex.quote for remote commands, which provides protection against basic shell injection, but the --remote argument itself is passed directly into a subprocess call, allowing for potential command-line argument injection if not carefully handled by the agent's calling environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 31, 2026, 11:00 PM
Security Audit — agent-trust-hub — gateway-restart