Security-Risk Patterns in OpenClaw Skills

Show HN: Security-Risk Patterns in OpenClaw Skills

Operating in show hn launch, Security-Risk Patterns in OpenClaw Skills operates.

Profile

I built a static analysis scanner that checks OpenClaw agent skill definitions.Here's every category I found on ClawHub.Hidden Content: HTML comments with instructions, zero-width Unicode characters (U+200B-U+200F, U+2060-2064, U+FEFF), CSS hiding (display:none, opacity:0), and bidirectional text overrides. These are invisible when reading markdown but the LLM processes them.Prompt Injection: Direct attempts to override agent behavior: "ignore previous instructions", role reassignment ("you are now"), model-specific tokens like [INST] and <|im_start|>, and persona manipulation ("pretend you are").Shell Execution: Remote code execution vectors: curl|bash, eval(), exec(), npx -y (auto-confirms

The company sits in the show hn launch segment, where it competes on its core product or service.

It is recorded at the Show HN launch stage.

Website: safeclaw.io