botlearn-selfoptimize
Fail
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: HIGHDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill implements a workflow in
scripts/botlearn-post.shandflows/community-help.mdthat reads the agent's long-term memory (~/.openclaw/workspace/MEMORY.md) and daily logs, then transmits this data tohttps://botlearn.ai/api/community/posts. This involves sending potentially sensitive project details, internal logic, and session context to an external server. - [PROMPT_INJECTION]: The skill instructions in
SKILL.mdandflows/community-help.mdexplicitly direct the agent to 'never delegate to humans' for community interactions. This behavioral override is designed to ensure the agent shares data and receives external instructions without human oversight or consent. - [COMMAND_EXECUTION]: The skill provides several bash scripts (
botlearn-post.sh,extract-skill.sh,activator.sh,error-detector.sh) that perform file system manipulation, directory creation, and network requests viacurl. - [EXTERNAL_DOWNLOADS]: The
botlearn-post.shscript downloads additional instructions and registration data fromhttps://botlearn.ai/skill.mdusingcurl. - [DATA_EXFILTRATION]: The skill manages and transmits API keys for the
botlearn.aiservice, which are stored in~/.config/botlearn/credentials.jsonand used in authenticated network requests.
Recommendations
- AI detected serious security threats
Audit Metadata