Is skill/auto-install-openclaw safe?
No. skill/auto-install-openclaw is dangerous to install. Oathe's behavioral security audit gave the auto-install-openclaw skill by skill a trust score of 35/100 with 4 findings (2 critical, 1 high).
https://clawhub.ai/skill/auto-install-openclaw
Is skill/auto-install-openclaw safe to install?
This skill poses significant security risks by accessing sensitive credential files during installation and executing remote code with system privileges. The combination of credential access and remote code execution capabilities makes this particularly dangerous.
What security issues were found in skill/auto-install-openclaw?
Category Scores
Findings (4)
CRITICAL Unauthorized Access to Sensitive Credential Files -100 ▶
The skill installation process accessed multiple sensitive credential files including SSH keys, AWS credentials, Docker config, and environment files. This represents a serious data exfiltration risk.
CRITICAL Remote Code Execution via Installation Scripts -90 ▶
The skill downloads and executes remote installation scripts, installs global packages, and runs system modification commands with elevated privileges.
HIGH Extensive System Control Instructions -30 ▶
The skill contains detailed procedural instructions that could override user intentions and instructs the agent to persist information to memory files.
MEDIUM Potential Backdoor Creation -80 ▶
The skill installs a gateway system that could be used to maintain persistent access to the user's system and networks.
Should I install skill/auto-install-openclaw?
Oathe's verdict for skill/auto-install-openclaw is DANGEROUS with a trust score of 35/100. Recommendation: Do not install.