openclaw
Manages OpenClaw, a self-hosted gateway connecting messaging platforms to AI agents, covering installation, configuration, and routing.
Install this skill
Security score
The openclaw skill was audited on May 13, 2026 and we found 19 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 265 | ```yaml |
Curl to non-GitHub URL
| 268 | curl -X POST "https://openclaw.example.com/hooks/ci-notify" \ |
Webhook reference - potential data exfiltration
| 7 | cron jobs in OpenClaw, set up webhooks, manage OpenClaw channels, pair a |
Webhook reference - potential data exfiltration
| 10 | configuration, cron scheduling, webhooks, and sub-agents. |
Webhook reference - potential data exfiltration
| 24 | Manage OpenClaw, an open-source self-hosted gateway that connects messaging platforms (WhatsApp, Telegram, Discord, Slack, Signal, iMessage) to AI coding agents. Covers the full lifecycle from install |
Webhook reference - potential data exfiltration
| 131 | ### Task E: Set up webhooks |
Webhook reference - potential data exfiltration
| 133 | Enable webhook ingestion for external triggers: |
Webhook reference - potential data exfiltration
| 250 | ### Example 3: Webhook-triggered CI notifications to WhatsApp |
Webhook reference - potential data exfiltration
| 258 | enabled: true, token: "ci-webhook-secret-2024", |
Webhook reference - potential data exfiltration
| 282 | - Webhook tokens should be stored securely and rotated periodically. Never use query string authentication. |
Access to hidden dotfiles in home directory
| 24 | Manage OpenClaw, an open-source self-hosted gateway that connects messaging platforms (WhatsApp, Telegram, Discord, Slack, Signal, iMessage) to AI coding agents. Covers the full lifecycle from install |
Access to hidden dotfiles in home directory
| 48 | Edit `~/.openclaw/openclaw.json` to enable channels. Each channel has `dmPolicy` (`pairing`, `allowlist`, `open`, `disabled`) and `groupPolicy` (`open`, `allowlist`, `disabled`). |
Access to hidden dotfiles in home directory
| 81 | { id: "alfred", name: "Alfred", workspace: "~/.openclaw/workspace-alfred", default: true }, |
Access to hidden dotfiles in home directory
| 109 | Cron runs inside the gateway and persists jobs at `~/.openclaw/cron/`. Enable with `"cron": { "enabled": true }`. |
Access to hidden dotfiles in home directory
| 200 | Config (`~/.openclaw/openclaw.json`): |
Access to hidden dotfiles in home directory
| 205 | workspace: "~/.openclaw/workspace", |
External URL reference
| 44 | The Control UI is accessible at `http://127.0.0.1:18789/` after the gateway starts. |
External URL reference
| 215 | Gateway started on http://127.0.0.1:18789/ |
External URL reference
| 268 | curl -X POST "https://openclaw.example.com/hooks/ci-notify" \ |