openclaw-config-validator Security Audit Report
openclaw-config-validator is an AI agent skill, created by charpup and published at charpup/openclaw-config-validator. ClawSecure audited openclaw-config-validator across 27 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 24 findings concentrate in Data Exfiltration, Command Injection and Policy Violation, including Pattern detected: fs.writeFile( and Pattern detected: fs.readFile(. 16 were rated high or critical severity.
Is openclaw-config-validator safe?
ClawSecure audited openclaw-config-validator and assigned a security score of 0/100 (High Risk), identifying 24 findings across Data Exfiltration and Command Injection. Review the findings below before installing.
What did ClawSecure find in openclaw-config-validator?
ClawSecure identified 24 findings in openclaw-config-validator, concentrated in Data Exfiltration, Command Injection and Policy Violation. 16 were rated high or critical severity. The most severe include Pattern detected: fs.writeFile( and Pattern detected: fs.readFile(.
How was openclaw-config-validator audited?
ClawSecure ran openclaw-config-validator through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 27 files from charpup/openclaw-config-validator.
What does a score of 0 mean?
ClawSecure assigned openclaw-config-validator a security score of 0/100, placing it in the High Risk range. This is driven by 24 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for openclaw-config-validator
ClawSecure detected 24 security findings in openclaw-config-validator, spanning Data Exfiltration, Command Injection, Policy Violation and Obfuscation.
- high · Pattern detected: fs.writeFile(. Data Exfiltration finding detected in
bin/schema-sync.js:57. - high · Pattern detected: fs.readFile(. Data Exfiltration finding detected in
bin/schema-sync.js:164. - high · Pattern detected: fs.readFile(. Data Exfiltration finding detected in
bin/schema-sync.js:259. - high · Pattern detected: fs.writeFile(. Data Exfiltration finding detected in
lib/schema-extractor.js:614. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:17. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:118. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:119. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:126. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:130. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:134. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
scripts/diff-schema.js:137. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/parse-schema.js:115.
Showing the 12 highest-severity of 24 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for openclaw-config-validator
Audit external network connections
Harden command execution
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on March 11, 2026. openclaw-config-validator is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.