gateway-restart
Warn
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes administrative shell commands (
openclaw gateway restart,openclaw cron list) to manage system services. It also supports remote execution via SSH (ssh -o ConnectTimeout=10 <host> <command>), which allows the agent to perform actions on other machines in the network if SSH keys are present. While appropriate for a service management tool, these capabilities could be misused if the agent is given a malicious instruction to target unauthorized hosts. - [COMMAND_EXECUTION]: The script uses
shlex.quotefor remote commands, which provides protection against basic shell injection, but the--remoteargument itself is passed directly into a subprocess call, allowing for potential command-line argument injection if not carefully handled by the agent's calling environment.
Audit Metadata