Secucheck

SuspiciousCK: High Risk

by Joonyoung Park

3.4K downloads4 starsv2.8.015 versions

Description

Comprehensive security audit for OpenClaw. Scans 7 domains (runtime, channels, agents, cron, skills, sessions, network), supports 3 expertise levels, context-aware analysis, and visual dashboard. Read-only with localized reports.

Changelog

secucheck 2.8.0 - Improved handling and documentation for failed security checks by adding platform-specific fallback commands. - Enhanced cross-platform compatibility with clearer instructions for Linux, macOS, WSL, Windows, and DSM environments. - Expanded agent instructions on fallback procedures for minimal environments and missing tools. - Documentation updates in SKILL.md for platform detection fields and fallback workflow. - No core features changed; this is a workflow and documentation enhancement release.

Published Feb 8, 2026Updated May 10, 2026

Security Analysis

ClawHub:

Suspicious

Clawkeeper:

CK: High Risk

Risk Score7.0 / 10

Significant risk indicators — exercise caution. Score is the sum of weighted findings below.

Findings

33 files analyzed

medium|+2.0 pts

Contains executable handler files (js/ts/sh/py)

low|+0.5 pts

33 files (typical skill has 1-3)

critical|+3.0 pts

Flagged as suspicious by ClawHub

high|+1.5 pts

Suspicious file name: scenarios/prompt-injection.md

ClawHub scanned: May 10, 2026

Rescanned every 6 hours by Clawkeeper

Deploy Securely

Free to scan. Pro to deploy.