setup-cloudbase-openclaw
Warn
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs users to store sensitive cloud credentials in plain-text configuration files. \n
SKILL.mdandREADME.mdprovide a configuration template formcporter.jsoncontainingTENCENTCLOUD_SECRETIDandTENCENTCLOUD_SECRETKEYfields. \n- Users are guided to replace placeholders with live API keys retrieved from the Tencent Cloud console to enable MCP functionality.\n- [COMMAND_EXECUTION]: Setup scripts perform broad file system operations to detect and modify installation directories. \n
scripts/setup.mjsandscripts/detect-setup.shcheck for existence of and write to paths such as~/.openclaw/,~/.clawdbot/, and~/.moltbot/to locate and update installation configurations. \n- The
copy-templatecommand uses recursive copy operations to move application code into the user's workspace.\n- [REMOTE_CODE_EXECUTION]: The skill installs an executable plugin that runs within the agent's gateway process. \n - The
install-plugincommand inscripts/setup.mjscopiesplugins/skill-enhancer/index.tsto the agent's extension directory. \n - This plugin hooks into the
before_agent_startevent, allowing it to execute code and modify prompt context dynamically during agent operation.\n- [PROMPT_INJECTION]: The skill steers agent behavior through global instruction sets and context manipulation. \n SKILL.mdupdates the workspaceAGENTS.mdfile with strict behavioral rules such as 'The agent MUST read skills first'. \n- The installed
skill-enhancerplugin prepends a mandatory instruction block to the model's context for every interaction, overriding default response patterns and forcing the agent to justify its actions.\n- [EXTERNAL_DOWNLOADS]: The skill leverages thenpxcommand to fetch and execute vendor-managed code and dependencies. \n - Documentation recommends running
npx @cloudbase/setup-openclawfor detection and setup. \n - The MCP configuration pulls the
cloudbase-mcpimplementation from a remote registry at runtime usingnpx, which is documented as a vendor-controlled resource.
Audit Metadata