Skill Trust Decision

clawdoctor

Name: clawdoctor Trust Review Report
Item: clawdoctor
Rating: 78
Author: ClawSafe

ClawDoctor 是合法的 OpenClaw 健康监控工具，存在轻微文档-行为差异（云端API配置但未启用）和供应链瑕疵（pip无版本锁定），无恶意行为证据。

Install decision first Source: ClawHub Scanned: Apr 6, 2026

Files 16

Artifacts 15

Violations 0

Findings 4

Why this conclusion was reached

1/4 dimensions flagged

Pass

Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block

Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Review

Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

文档声明宽泛 +10

SKILL.md未声明任何权限，但代码使用subprocess/curl/requests

云端功能注释但存在 +5

agent.py配置了api.clawdoctor.io但send_to_cloud()被注释

依赖无版本锁定 +5

install.sh中pip install psutil无版本锁定

8.8.8.8硬编码IP +2

clawdoctor.py:305用于检测本机网络，非恶意用途

Most important evidence

Low Doc Mismatch

SKILL.md 权限声明缺失

SKILL.md未声明任何allowed-tools权限，但代码实际使用subprocess、psutil等工具读取系统状态

SKILL.md:1

在SKILL.md的Requirements部分明确声明需要哪些工具权限

Low Supply Chain

依赖无版本锁定

install.sh中pip install psutil未指定版本，可能安装到有漏洞的版本

install.sh:9

修改为: pip3 install psutil>=5.9.0 --user

Info Doc Mismatch

云端功能代码存在但未启用

agent.py配置了https://api.clawdoctor.io/v1/heartbeat，但send_to_cloud()函数被注释，不会实际发送数据

agent.py:15

删除未使用的云端配置代码，或明确文档说明未来可能的数据收集功能

Info Sensitive Access

读取本地OpenClaw配置

代码读取~/.openclaw/目录下的配置文件和日志用于监控，属于声明范围内的本地操作

clawdoctor.py:51

无需修改，这是监控工具的正常功能

Declared capability vs actual capability

Filesystem Pass

Declared NONE

→

Inferred READ

clawdoctor.py:51 读取~/.openclaw/配置和日志

Shell Pass

Declared NONE

→

Inferred READ

clawdoctor.py:60-64 subprocess调用curl检查Gateway

Network Pass

Declared NONE

→

Inferred READ

agent.py:17 配置云端API但未启用; clawdoctor.py:302-305 socket连接8.8.8.8

Database Pass

Declared NONE

→

Inferred NONE

无数据库操作

Suspicious artifacts and egress

High IP Address

8.8.8.8

clawdoctor.py:305

Medium External URL

https://img.shields.io/badge/OpenClaw-Health%20Monitor-blue?style=for-the-badge

README.md:4

Medium External URL

https://img.shields.io/badge/Python-3.10%2B-green?style=for-the-badge&logo=python&logoColor=white

README.md:5

Medium External URL

https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge

README.md:6

Medium External URL

http://127.0.0.1:8080/dashboard.html

README.md:22

Medium External URL

https://api.clawdoctor.io/v1/heartbeat

agent.py:17

Medium External URL

http://127.0.0.1:18789/

agent.py:34

Medium External URL

https://cdn.tailwindcss.com

dashboard.html:7

Medium External URL

http://127.0.0.1:52691

dashboard.html:199

Medium External URL

http://127.0.0.1:64144

dashboard_simple.html:183

Medium External URL

https://checkout.paddle.com/checkout/product/pri_01kkm07e93d54fat920xe9b5rs

payment.html:48

Medium External URL

https://checkout.paddle.com/checkout/product/pri_01kkm09nvwj9ex7nssjf27kbch

payment.html:70

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
psutil	`*`	pip	No	无版本锁定，存在供应链风险但CVSS评分低

File composition

16 files · 3061 lines

Python 7 files · 1563 linesHTML 3 files · 1084 linesMarkdown 4 files · 343 linesJSON 1 files · 38 linesShell 1 files · 33 lines

Files of concern · 7

dashboard.html HTML · 526 lines

https://cdn.tailwindcss.com · http://127.0.0.1:52691

dashboard_simple.html HTML · 429 lines

http://127.0.0.1:64144

clawdoctor.py Python · 465 lines

读取本地OpenClaw配置 · 8.8.8.8

agent.py Python · 224 lines

云端功能代码存在但未启用 · https://api.clawdoctor.io/v1/heartbeat · http://127.0.0.1:18789/

payment.html HTML · 129 lines

https://checkout.paddle.com/checkout/product/pri_01kkm07e93d54fat920xe9b5rs · https://checkout.paddle.com/checkout/product/pri_01kkm09nvwj9ex7nssjf27kbch · https://checkout.paddle.com/checkout/product/pri_01kkm0bk13cv93jam6nq3tvj88

server.py Python · 148 lines

http://127.0.0.1:

README.md Markdown · 135 lines

https://img.shields.io/badge/OpenClaw-Health%20Monitor-blue?style=for-the-badge · https://img.shields.io/badge/Python-3.10%2B-green?style=for-the-badge&logo=python&logoColor=white · https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge · http://127.0.0.1:8080/dashboard.html · [email protected]

Other files · clawdoctor_simple.py · agent_v2.py · README_NEW.md · server_simple.py · agent_simple.py

16 files · 116.2 KB · 3061 lines

Python 7f · 1563LHTML 3f · 1084LMarkdown 4f · 343LJSON 1f · 38LShell 1f · 33L

├─ 📝 README.md Markdown 135L · 3.3 KB

├─ 📝 README_NEW.md Markdown 135L · 3.3 KB

├─ 📝 SKILL.md Markdown 67L · 1.0 KB

├─ 🐍 agent.py Python 224L · 7.5 KB

├─ 🐍 agent_simple.py Python 84L · 2.5 KB

├─ 🐍 agent_v2.py Python 175L · 6.0 KB

├─ 🐍 clawdoctor.py Python 465L · 15.2 KB

├─ 🐍 clawdoctor_simple.py Python 353L · 11.3 KB

├─ 📄 dashboard.html HTML 526L · 27.4 KB

├─ 📄 dashboard_simple.html HTML 429L · 21.7 KB

├─ 🔧 install.sh Shell 33L · 991 B

├─ 📋 package.json JSON 38L · 935 B

├─ 📄 payment.html HTML 129L · 7.4 KB

├─ 📝 screenshot-placeholder.md Markdown 6L · 149 B

├─ 🐍 server.py Python 148L · 4.2 KB

└─ 🐍 server_simple.py Python 114L · 3.3 KB

Security positives

云端数据外传功能被注释，实际不会外传数据

所有网络操作均为本地127.0.0.1，无公网暴露

安全扫描功能是防御性的（检查其他技能而非攻击）

无凭证收割、代码混淆或隐藏指令

修复功能仅作用于OpenClaw相关进程

支付页面使用正规Paddle平台