Skills/ClawHub/command-center

command-center@1.0.0

CAUTION· static only

Publisher claims: "Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher seanford · publishing for 248 daysInstalls 435Last detonated 44 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-12 and scored it 58/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Privileged sudo commandconfig/system-deps.json:10 · Privileged sudo command — agent may execute with elevated privileges"apt": "sudo apt install -y sysstat",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandconfig/system-deps.json:12 · Privileged sudo command — agent may execute with elevated privileges"dnf": "sudo dnf install -y sysstat",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandconfig/system-deps.json:11 · Privileged sudo command — agent may execute with elevated privileges"yum": "sudo yum install -y sysstat",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandconfig/system-deps.json:13 · Privileged sudo command — agent may execute with elevated privileges"pacman": "sudo pacman -S --noconfirm sysstat",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/setup.sh:103 · Privileged sudo command — agent may execute with elevated privilegesecho " 💡 sysstat — install for disk I/O vitals: sudo apt install sysstat"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Unicode escape sequence detectedlib/server.js:3570 · Unicode escape sequence detected — may contain obfuscated payloads.replace(/[\u2705\u274C\uD83D\uDCDD\uD83D\uDD27]/g, "")Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Privileged sudo commandscripts/setup.sh:109 · Privileged sudo command — agent may execute with elevated privilegesecho " 💡 lm-sensors — install for temperature sensors: sudo apt install lm-sensors"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/start.sh:47 · Process kill command — agent can terminate processesif ! kill -0 $SERVER_PID 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandsrc/vitals.js:241 · Privileged sudo command — agent may execute with elevated privileges'sudo -n powermetrics --samplers smc -i 1 -n 1 2>/dev/null | grep -i "die temp" | head -1',Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/verify.sh:97 · Privileged sudo command — agent may execute with elevated privilegesecho " ✅ passwordless sudo — Apple Silicon CPU temperature"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/setup.sh:117 · Privileged sudo command — agent may execute with elevated privilegesecho " ✅ passwordless sudo — Apple Silicon CPU temperature"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/start.sh:29 · Process kill command — agent can terminate processesif [ -f "$PID_FILE" ] && kill -0 "$(cat $PID_FILE)" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/setup.sh:116 · Privileged sudo command — agent may execute with elevated privilegesif sudo -n true 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/stop.sh:12 · Process kill command — agent can terminate processesif kill -0 "$PID" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandconfig/system-deps.json:14 · Privileged sudo command — agent may execute with elevated privileges"apk": "sudo apk add sysstat"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandAGENTS.md:103 · File permission modification command — agent changes file ownership/permissionschmod +x .git/hooks/pre-commitFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:23 · npx invocation of non-well-known package — may execute untrusted codenpx clawhub@latest install command-centerFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commandlib/server.js:868 · Privileged sudo command — agent may execute with elevated privileges'sudo -n powermetrics --samplers smc -i 1 -n 1 2>/dev/null | grep -i "die temp" | head -1',Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/setup.sh:119 · Privileged sudo command — agent may execute with elevated privilegesecho " 💡 passwordless sudo — configure for CPU temperature via powermetrics"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/verify.sh:99 · Privileged sudo command — agent may execute with elevated privilegesecho " ⚠️ passwordless sudo — not configured (CPU temperature unavailable)"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/verify.sh:96 · Privileged sudo command — agent may execute with elevated privilegesif sudo -n true 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
HTML that renders invisible but is read by the agentpublic/index.html:311 · HTML that renders invisible but is read by the agent · informational: not an instruction fileChecking...</span > </div> </div> </div> </div> </div> <!-- Token Utilization Widget --> <div class="utilization-section"> <div class="utilization-card" id="antFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
Process kill commandscripts/stop.sh:13 · Process kill command — agent can terminate processeskill "$PID"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/stop.sh:29 · Process kill command — agent can terminate processes# Also kill any orphaned processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandsrc/jobs.js:233 · Process kill command — agent can terminate processes// Kill job: POST /api/jobs/:id/killFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/stop.sh:23 · Process kill command — agent can terminate processeskill "$PID"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Unicode escape sequence detectedsrc/state.js:97 · Unicode escape sequence detected — may contain obfuscated payloadstext: text.replace(/[\u2705\u274C\uD83D\uDCDD\uD83D\uDD27]/g, "").trim(),Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Process kill commandscripts/stop.sh:22 · Process kill command — agent can terminate processesif kill -0 "$PID" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈3,332 tok
3 files · 81 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

22 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim seanford: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  3. Unicode escape sequence detected≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
  4. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  6. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim seanfordPropose a patch to the maintainer