← Back to Scanner

openclaw-security-monitor Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

openclaw-security-monitor is an AI agent skill, created by adibirzu and published at openclaw/skills. ClawSecure audited openclaw-security-monitor across 59 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 82 findings concentrate in Malicious Code, Command Injection and Unauthorized Tool Use, including Pattern detected: require('child_process') and Detects command injection patterns in agent skills: shell operators,.... 64 were rated high or critical severity.

Is openclaw-security-monitor safe?

ClawSecure audited openclaw-security-monitor and assigned a security score of 0/100 (High Risk), identifying 82 findings across Malicious Code and Command Injection. Review the findings below before installing.

What did ClawSecure find in openclaw-security-monitor?

ClawSecure identified 82 findings in openclaw-security-monitor, concentrated in Malicious Code, Command Injection and Unauthorized Tool Use. 64 were rated high or critical severity. The most severe include Pattern detected: require('child_process') and Detects command injection patterns in agent skills: shell operators,....

How was openclaw-security-monitor audited?

ClawSecure ran openclaw-security-monitor through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 59 files from openclaw/skills.

What does a score of 0 mean?

ClawSecure assigned openclaw-security-monitor a security score of 0/100, placing it in the High Risk range. This is driven by 82 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for openclaw-security-monitor

ClawSecure detected 82 security findings in openclaw-security-monitor, spanning Malicious Code, Command Injection, Unauthorized Tool Use and Code Injection.

Showing the 12 highest-severity of 82 findings. The full interactive list appears below.

3-Layer Audit Protocol

Security Recommendations for openclaw-security-monitor

Audit external network connections
openclaw-security-monitor connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.
Harden command execution
openclaw-security-monitor constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.
Eliminate dynamic code execution
openclaw-security-monitor evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

80e3abb00251d455Score 0/10062ac696296b54aadScore 0/100capability-evolverScore 0/100capability-evolverScore 0/10062ac696296b54aadScore 0/100

Scanned on March 3, 2026. openclaw-security-monitor is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan