📦
Audit-Verlauf
openclaw-secure-linux-cloud - 4 Audits
Versionsvergleich
Änderungen an Fähigkeiten und Befunden über geprüfte Versionen hinweg, neueste zuerst.
Audit-Version 4 Neueste
2026年7月8日 09:42
The skill is legitimate security guidance, and many SKILL.md alerts are Markdown false positives. However, the reference includes privileged host changes, persistent service enablement, token display, and root execution of project scripts from a cloned repository. These commands require strong user confirmation and safer installation guidance before publication.
2
Gescannte Dateien
505
Analysierte Zeilen
25
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (5)
Kritisch
Privileged Setup Script Execution
The reference clones OpenClaw from GitHub and then runs a project setup script with sudo. This combines external source retrieval with root code execution.
The lines show the install flow from external clone to sudo script execution. This is a clear supply-chain and privilege boundary risk.
Hoch
Environment file access
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command extracts OPENCLAW_GATEWAY_TOKEN from a .env file. Revealing this token can compromise the OpenClaw gateway.
Hoch
Systemd service enablement
sudo systemctl enable --now unattended-upgrades
The command enables unattended-upgrades as a persistent system service. Persistent service changes must be explicit and reviewed.
Hoch
Systemd service enablement
sudo systemctl enable --now nftables
The command enables nftables persistently and starts it immediately. This can alter host networking across reboots.
Hoch
Remote Lockout Risk From SSH and Firewall Changes
The reference changes SSH authentication and replaces nftables rules on a remote host. Incorrect use can lock out administration or change exposed services.
The cited section writes SSH and firewall configuration, then reloads or enables services. The risk is operational and depends on careful sequencing.
Elemente der Fähigkeitsprüfung (17)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Kritisch
sudo privilege escalation
sudo ./setup-podman.sh --quadlet
The command runs a repository setup script with sudo. Executing downloaded project scripts as root is a direct privileged code execution risk.
Kritisch
sudo privilege escalation
sudo ./scripts/run-openclaw-podman.sh launch setup
The command runs an OpenClaw helper script with sudo. It is privileged project code execution and can alter service or host state.
Hoch
sudo privilege escalation
sudo apt update
This is a privileged package-manager command in copy-paste guidance. It can change host package state if an assistant or user runs it.
Hoch
sudo privilege escalation
sudo apt full-upgrade -y
A full system upgrade with sudo can replace core packages and affect availability. It is legitimate hardening guidance but still a privileged host change.
Hoch
sudo privilege escalation
sudo apt install -y git curl openssl podman nftables unattended-upgrades apt-listchanges
The command installs packages with root privileges. This changes the trusted computing base and depends on the configured package sources.
Hoch
sudo privilege escalation
sudo tee /etc/apt/apt.conf.d/20auto-upgrades >/dev/null <<'EOF'
The command writes an apt configuration file under /etc with sudo. Misuse can change unattended upgrade behavior across the host.
Hoch
sudo privilege escalation
sudo systemctl enable --now unattended-upgrades
The command enables and starts a systemd service. That creates persistent host behavior and should require explicit user approval.
Hoch
sudo privilege escalation
sudo tee /etc/ssh/sshd_config.d/99-openclaw-hardening.conf >/dev/null <<'EOF'
The command writes SSH daemon hardening settings under /etc. Incorrect SSH changes can lock out remote access or weaken the login path.
Hoch
sudo privilege escalation
sudo systemctl reload ssh
Reloading SSH applies privileged configuration changes to the active daemon. A wrong setting can disrupt remote administration.
Hoch
sudo privilege escalation
sudo tee /etc/nftables.conf >/dev/null <<'EOF'
The command replaces the host nftables configuration with root privileges. Firewall mistakes can expose services or cut off access.
Hoch
sudo privilege escalation
sudo systemctl enable --now nftables
The command enables and starts nftables as a persistent system service. It changes network enforcement at boot and runtime.
Hoch
sudo privilege escalation
sudo nft -f /etc/nftables.conf
Loading nftables rules with sudo immediately changes firewall behavior. A bad rule set can expose or block critical network paths.
Hoch
sudo privilege escalation
sudo git clone https://github.com/openclaw/openclaw.git
The command clones external source code into /opt with sudo. That introduces supply-chain risk and root-owned files from a remote repository.
Hoch
sudo privilege escalation
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command reads the OpenClaw gateway token from a protected environment file. Displaying that token can disclose a control-plane secret.
Hoch
sudo privilege escalation
sudo systemctl --machine openclaw@ --user restart openclaw.service
Restarting the OpenClaw service with sudo changes active service state. It can disrupt access or apply unsafe configuration changes.
Hoch
Hidden file access
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command reads a hidden .env file under the OpenClaw user home. That file contains a gateway token and should be handled as secret material.
Mittel
Hardcoded URL
sudo git clone https://github.com/openclaw/openclaw.git
The command depends on a hardcoded external GitHub repository. This is expected for installation but still creates supply-chain reliance.
Risikofaktoren
⚙️ Externe Befehle (31)
references/REFERENCE.md:118 references/REFERENCE.md:99 references/REFERENCE.md:100 references/REFERENCE.md:101 references/REFERENCE.md:107 references/REFERENCE.md:112 references/REFERENCE.md:118 references/REFERENCE.md:120 references/REFERENCE.md:130 references/REFERENCE.md:131 references/REFERENCE.md:137 references/REFERENCE.md:164 references/REFERENCE.md:165 references/REFERENCE.md:166 references/REFERENCE.md:173 references/REFERENCE.md:176 references/REFERENCE.md:182 references/REFERENCE.md:183 references/REFERENCE.md:190 references/REFERENCE.md:196 references/REFERENCE.md:202 references/REFERENCE.md:203 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 SKILL.md:16 SKILL.md:25 SKILL.md:76 SKILL.md:77 SKILL.md:80 SKILL.md:152
🌐 Netzwerkzugriff (6)
📁 Dateisystemzugriff (13)
references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:196 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:107 references/REFERENCE.md:120 references/REFERENCE.md:137 SKILL.md:80 SKILL.md:80
Erkannte Muster
Systemd service enablementSystemd service enablement
Geprüft von: codex
2026年7月8日 09:42
The skill is legitimate security guidance, and many SKILL.md alerts are Markdown false positives. However, the reference includes privileged host changes, persistent service enablement, token display, and root execution of project scripts from a cloned repository. These commands require strong user confirmation and safer installation guidance before publication.
2
Gescannte Dateien
505
Analysierte Zeilen
25
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (5)
Kritisch
Privileged Setup Script Execution
The reference clones OpenClaw from GitHub and then runs a project setup script with sudo. This combines external source retrieval with root code execution.
The lines show the install flow from external clone to sudo script execution. This is a clear supply-chain and privilege boundary risk.
Hoch
Environment file access
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command extracts OPENCLAW_GATEWAY_TOKEN from a .env file. Revealing this token can compromise the OpenClaw gateway.
Hoch
Systemd service enablement
sudo systemctl enable --now unattended-upgrades
The command enables unattended-upgrades as a persistent system service. Persistent service changes must be explicit and reviewed.
Hoch
Systemd service enablement
sudo systemctl enable --now nftables
The command enables nftables persistently and starts it immediately. This can alter host networking across reboots.
Hoch
Remote Lockout Risk From SSH and Firewall Changes
The reference changes SSH authentication and replaces nftables rules on a remote host. Incorrect use can lock out administration or change exposed services.
The cited section writes SSH and firewall configuration, then reloads or enables services. The risk is operational and depends on careful sequencing.
Elemente der Fähigkeitsprüfung (17)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Kritisch
sudo privilege escalation
sudo ./setup-podman.sh --quadlet
The command runs a repository setup script with sudo. Executing downloaded project scripts as root is a direct privileged code execution risk.
Kritisch
sudo privilege escalation
sudo ./scripts/run-openclaw-podman.sh launch setup
The command runs an OpenClaw helper script with sudo. It is privileged project code execution and can alter service or host state.
Hoch
sudo privilege escalation
sudo apt update
This is a privileged package-manager command in copy-paste guidance. It can change host package state if an assistant or user runs it.
Hoch
sudo privilege escalation
sudo apt full-upgrade -y
A full system upgrade with sudo can replace core packages and affect availability. It is legitimate hardening guidance but still a privileged host change.
Hoch
sudo privilege escalation
sudo apt install -y git curl openssl podman nftables unattended-upgrades apt-listchanges
The command installs packages with root privileges. This changes the trusted computing base and depends on the configured package sources.
Hoch
sudo privilege escalation
sudo tee /etc/apt/apt.conf.d/20auto-upgrades >/dev/null <<'EOF'
The command writes an apt configuration file under /etc with sudo. Misuse can change unattended upgrade behavior across the host.
Hoch
sudo privilege escalation
sudo systemctl enable --now unattended-upgrades
The command enables and starts a systemd service. That creates persistent host behavior and should require explicit user approval.
Hoch
sudo privilege escalation
sudo tee /etc/ssh/sshd_config.d/99-openclaw-hardening.conf >/dev/null <<'EOF'
The command writes SSH daemon hardening settings under /etc. Incorrect SSH changes can lock out remote access or weaken the login path.
Hoch
sudo privilege escalation
sudo systemctl reload ssh
Reloading SSH applies privileged configuration changes to the active daemon. A wrong setting can disrupt remote administration.
Hoch
sudo privilege escalation
sudo tee /etc/nftables.conf >/dev/null <<'EOF'
The command replaces the host nftables configuration with root privileges. Firewall mistakes can expose services or cut off access.
Hoch
sudo privilege escalation
sudo systemctl enable --now nftables
The command enables and starts nftables as a persistent system service. It changes network enforcement at boot and runtime.
Hoch
sudo privilege escalation
sudo nft -f /etc/nftables.conf
Loading nftables rules with sudo immediately changes firewall behavior. A bad rule set can expose or block critical network paths.
Hoch
sudo privilege escalation
sudo git clone https://github.com/openclaw/openclaw.git
The command clones external source code into /opt with sudo. That introduces supply-chain risk and root-owned files from a remote repository.
Hoch
sudo privilege escalation
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command reads the OpenClaw gateway token from a protected environment file. Displaying that token can disclose a control-plane secret.
Hoch
sudo privilege escalation
sudo systemctl --machine openclaw@ --user restart openclaw.service
Restarting the OpenClaw service with sudo changes active service state. It can disrupt access or apply unsafe configuration changes.
Hoch
Hidden file access
sudo -u openclaw grep '^OPENCLAW_GATEWAY_TOKEN=' /home/openclaw/.openclaw/.env
The command reads a hidden .env file under the OpenClaw user home. That file contains a gateway token and should be handled as secret material.
Mittel
Hardcoded URL
sudo git clone https://github.com/openclaw/openclaw.git
The command depends on a hardcoded external GitHub repository. This is expected for installation but still creates supply-chain reliance.
Risikofaktoren
⚙️ Externe Befehle (31)
references/REFERENCE.md:118 references/REFERENCE.md:99 references/REFERENCE.md:100 references/REFERENCE.md:101 references/REFERENCE.md:107 references/REFERENCE.md:112 references/REFERENCE.md:118 references/REFERENCE.md:120 references/REFERENCE.md:130 references/REFERENCE.md:131 references/REFERENCE.md:137 references/REFERENCE.md:164 references/REFERENCE.md:165 references/REFERENCE.md:166 references/REFERENCE.md:173 references/REFERENCE.md:176 references/REFERENCE.md:182 references/REFERENCE.md:183 references/REFERENCE.md:190 references/REFERENCE.md:196 references/REFERENCE.md:202 references/REFERENCE.md:203 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 SKILL.md:16 SKILL.md:25 SKILL.md:76 SKILL.md:77 SKILL.md:80 SKILL.md:152
🌐 Netzwerkzugriff (6)
📁 Dateisystemzugriff (13)
references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:196 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:107 references/REFERENCE.md:120 references/REFERENCE.md:137 SKILL.md:80 SKILL.md:80
Erkannte Muster
Systemd service enablementSystemd service enablement
Geprüft von: codex
2026年7月1日 00:36
Static analysis correctly identified many privileged command, network, and filesystem patterns, but the scanned files are documentation for secure OpenClaw deployment rather than executable code. The confirmed risk is operational: users may run sudo commands, modify firewall and SSH settings, enable services, or expose secrets while following examples. No evidence found of prompt injection, covert exfiltration, obfuscation, or malicious intent.
2
Gescannte Dateien
505
Analysierte Zeilen
7
Prüfelemente
3
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (3)
Mittel
references/REFERENCE.md:98-112references/REFERENCE.md:117-131references/REFERENCE.md:137-166references/REFERENCE.md:173-190references/REFERENCE.md:202-203
Privileged Linux Administration Commands
The reference includes sudo commands that update packages, change SSH configuration, write firewall rules, enable services, clone software into /opt, and restart OpenClaw services. These are legitimate for this security-hardening skill, but they can lock out users, alter host security boundaries, or install services if followed without review.
The commands are plainly privileged host-modification examples. The surrounding context frames them as hardening guidance, so the risk is operational rather than malicious.
Mittel
Sensitive OpenClaw Token and Config File Handling
The reference shows reading OPENCLAW_GATEWAY_TOKEN from an .env file and changing permissions on the OpenClaw configuration directory. This is expected for deployment guidance, but it involves secrets and should be handled carefully to avoid disclosure in terminals, logs, or shared chat transcripts.
The file explicitly references a gateway token in a hidden .env path and config permissions. It is semantically relevant and not hidden, but it remains sensitive handling guidance.
Mittel
references/REFERENCE.md:104-112references/REFERENCE.md:164-166references/REFERENCE.md:181-183references/REFERENCE.md:201-203
Service Enablement and Persistence Instructions
The reference enables unattended-upgrades and nftables, then starts or restarts OpenClaw-related user services. This persistence is normal for server deployment, but marketplace users should understand these commands change long-running host behavior.
The systemd and service-management examples are clear. They are documented deployment steps, not covert persistence.
Statische falsch positive Treffer ignoriert (3)
Diese statischen Treffer wurden durch semantische Prüfung verworfen oder entsprachen reinen Schema-Tokens; daher werden sie aus Transparenzgründen angezeigt, beeinflussen jedoch nicht die Qualitätsbewertung.
Niedrig
SKILL.md:25-26SKILL.md:150-159references/REFERENCE.md:42-64references/REFERENCE.md:94-102references/REFERENCE.md:272-287
Markdown Command Examples Are Not Auto-Executed
Many external-command findings are shell snippets inside markdown documentation. The skill does not include executable scripts or hooks that automatically run these commands; users must choose to run them manually.
The cited content is markdown documentation and fenced command examples. No executable source file or automatic runner is present in the scanned files.
Niedrig
references/REFERENCE.md:11-12references/REFERENCE.md:57-69references/REFERENCE.md:303-306SKILL.md:13-18SKILL.md:74-77
Hardcoded Network Values Are Documentation Examples
The hardcoded URL cites the source article, while 127.0.0.1 and 0.0.0.0 are used to explain loopback binding and unsafe public binding. I did not find evidence of data exfiltration or unauthorized network calls.
The network values are embedded in explanatory text and local tunnel examples. Their context is defensive guidance, not outbound collection.
Niedrig
references/REFERENCE.md:48-54references/REFERENCE.md:98-102references/REFERENCE.md:289-295SKILL.md:1-3
Weak Cryptography Flags Are Contextual False Positives
The scanner flagged weak cryptography, but the relevant text recommends ed25519 SSH keys or mentions packages and stronger authentication. No evidence found of MD5, SHA-1, DES, RC4, or custom weak cryptographic implementation.
The cited lines contain documentation text and package names, not weak algorithm use. The static labels appear to be keyword matches without semantic confirmation.
Risikofaktoren
⚙️ Externe Befehle (7)
🌐 Netzwerkzugriff (4)
📁 Dateisystemzugriff (5)
🔑 Umgebungsvariablen (1)
Erkannte Muster
Privileged Linux Administration CommandsSensitive OpenClaw Token and Config File HandlingService Enablement and Persistence Instructions
Geprüft von: codex
2026年3月29日 08:19
All 116 static findings are false positives. The shell commands in REFERENCE.md are legitimate system administration examples for deploying and hardening OpenClaw on Linux servers. The sudo commands, firewall rules, and service management operations are standard security practices for server hardening. This skill provides defensive security guidance without any malicious functionality or data exfiltration patterns.
2
Gescannte Dateien
505
Analysierte Zeilen
3
Prüfelemente
0
Falschmeldungen ignoriert
Risikofaktoren
⚙️ Externe Befehle (80)
references/REFERENCE.md:3 references/REFERENCE.md:48-55 references/REFERENCE.md:55-59 references/REFERENCE.md:59-64 references/REFERENCE.md:64-68 references/REFERENCE.md:68-70 references/REFERENCE.md:70-87 references/REFERENCE.md:87 references/REFERENCE.md:87 references/REFERENCE.md:87 references/REFERENCE.md:87 references/REFERENCE.md:87-88 references/REFERENCE.md:88 references/REFERENCE.md:88 references/REFERENCE.md:88-89 references/REFERENCE.md:89 references/REFERENCE.md:89-98 references/REFERENCE.md:98-102 references/REFERENCE.md:102-106 references/REFERENCE.md:106-113 references/REFERENCE.md:113-117 references/REFERENCE.md:117-132 references/REFERENCE.md:132-136 references/REFERENCE.md:136-167 references/REFERENCE.md:167-171 references/REFERENCE.md:171-177 references/REFERENCE.md:177-181 references/REFERENCE.md:181-184 references/REFERENCE.md:184-188 references/REFERENCE.md:188-191 references/REFERENCE.md:191-195 references/REFERENCE.md:195-197 references/REFERENCE.md:197-201 references/REFERENCE.md:201-204 references/REFERENCE.md:204-211 references/REFERENCE.md:211-247 references/REFERENCE.md:247-251 references/REFERENCE.md:251-255 references/REFERENCE.md:255-264 references/REFERENCE.md:264-270 references/REFERENCE.md:270-274 references/REFERENCE.md:274-280 references/REFERENCE.md:280-285 references/REFERENCE.md:285-287 references/REFERENCE.md:287-305 references/REFERENCE.md:305-306 references/REFERENCE.md:306-309 references/REFERENCE.md:309-324 references/REFERENCE.md:118 references/REFERENCE.md:117-132 references/REFERENCE.md:99 references/REFERENCE.md:100 references/REFERENCE.md:101 references/REFERENCE.md:107 references/REFERENCE.md:112 references/REFERENCE.md:118 references/REFERENCE.md:120 references/REFERENCE.md:130 references/REFERENCE.md:131 references/REFERENCE.md:137 references/REFERENCE.md:164 references/REFERENCE.md:165 references/REFERENCE.md:166 references/REFERENCE.md:173 references/REFERENCE.md:176 references/REFERENCE.md:182 references/REFERENCE.md:183 references/REFERENCE.md:190 references/REFERENCE.md:196 references/REFERENCE.md:202 references/REFERENCE.md:203 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 SKILL.md:16 SKILL.md:25 SKILL.md:76 SKILL.md:77 SKILL.md:80 SKILL.md:152
🌐 Netzwerkzugriff (8)
📁 Dateisystemzugriff (14)
references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:196 references/REFERENCE.md:196 references/REFERENCE.md:252 references/REFERENCE.md:253 references/REFERENCE.md:254 references/REFERENCE.md:309 references/REFERENCE.md:324 references/REFERENCE.md:107 references/REFERENCE.md:120 references/REFERENCE.md:137 SKILL.md:80 SKILL.md:80
Geprüft von: claude