OpenClaw Health Monitor

Security checks across malware telemetry and agentic risk

Overview

The plugin’s behavior matches a health-monitoring tool, but users should know it runs local commands, reads OpenClaw logs and gateway-token context for localhost checks, and can clear alerts without confirmation.

Install only if you are comfortable with a startup health monitor that periodically runs local OpenClaw/system checks and reads recent OpenClaw logs. Keep external alerts set to "none" unless you intentionally want messages sent through WhatsApp or Telegram, review diagnostic bundles before sharing them, and use the alert clear action carefully because it can dismiss all active alerts at once.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The tool exposes a destructive `clear` action that immediately dismisses all active alerts with no confirmation, authorization gate, or friction. In an agent context, a mistaken or manipulated tool invocation can silently suppress operational or security alerts, reducing visibility into real problems and delaying response.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The tool description presents the action as a simple health snapshot, but implementation invokes external commands, PowerShell, shell pipelines, and local log inspection. This hidden execution surface can mislead users or higher-level agents into granting or invoking broader host access than expected, increasing the chance of unsafe execution in sensitive environments.

VirusTotal

62/62 vendors flagged this plugin as clean.

View on VirusTotal