openclaw-manager — security grade CAUTION, quality 56/100

Security audit verdict: CAUTION · quality 56/100

Flagged: sudo usage. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

About openclaw-manager

🦞 虾池子 (OpenClaw Manager) 高性能跨平台 AI 助手管理工具，基于 Tauri 2.0 + React + TypeScript + Rust 构建。 English 📸 界面预览 📊 仪表盘概览 实时监控服务状态，一键管理 AI 助手服务。 服务状态实时监控（端口、进程 ID、内存、运行时间） 快捷操作：启动 / 停止 / 重启 / 诊断 实时日志查看，支持自动刷新 🤖 AI 模型配置 灵活配置多个 AI 提供商，支持自定义 API 地址。 支持 14+ AI 提供商（Anthropic、OpenAI、DeepSeek、Moonshot、Gemini 等） 自定义 API 端点，兼容 OpenAI 格式的第三方服务 一键设置主模型，快速切换 📱 消息渠道配置 连接多种即时通讯平台，打造全渠道 AI 助手。 Telegram Bot 飞书机器人 Telegram — Bot Token 配置、私聊/群组策略 飞书 — App ID/Secret、WebSocket 连接、多部署区域 更多渠道 — Discord、Slack、WhatsApp、iMessage、微信、钉钉、QQ 配置说明 — 每个渠道提供官方文档链接，一键跳转配置指南 🤝 Agent 管理 多智能体管理，为不同角色分配独立身份、模型与渠道。 创建和管理多个虚拟员工（Agent），支持自定义名称、Emoji 标识和角色描述 每个 Agent 可独立配置 AI 模型、绑定消息渠道、设置工具权限 支持沙箱模式、工作空间隔离、@提及模式和子代理权限控制 一键设置主 Agent，处理未绑定渠道的消息 🧩 技能库 统一管理

Quick Facts

Compatible Skills

These tools work well together with openclaw-manager for enhanced workflows:

• codexia — semantic(0.30)+complementary+same_lang+similar_pop+shared_platform (60%)
• svelte-claude-skills — semantic(0.25)+complementary+same_lang+similar_pop+shared_platform (59%)
• happy-claude-skills — semantic(0.25)+complementary+same_lang+similar_pop+shared_platform (59%)
• daiso-mcp — semantic(0.24)+complementary+same_lang+similar_pop+shared_platform (59%)
• codex-mcp-server — semantic(0.18)+complementary+same_lang+similar_pop+shared_platform (56%)

openclaw-manager alternative? Top 6 similar tools

Looking for a openclaw-manager alternative? If you're comparing openclaw-manager with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

• refly by refly-ai · ⭐ 7.5k

  The first open-source agent skills builder. Define skills by vibe workflow, run on Claude Code, Cursor, Codex

• Claude-to-IM-skill by op7418 · ⭐ 2.9k

  Bridge Claude Code / Codex to IM platforms — chat with AI coding agents from Telegram, Discord, or Feishu/Lark

• skillshare by runkids · ⭐ 2.7k

  📚 Sync skills across all AI CLI tools with one command and simplify team sharing. Supporting Codex, Claude Co

• pi-skills by badlogic · ⭐ 2.5k

  Skills for pi coding agent (compatible with Claude Code and Codex CLI)

• agent-skill-creator by FrancyJGLisboa · ⭐ 2.4k

  Build tested agent skills and govern their lifecycle through a user-defined marketplace: evidence, discovery,

• learning-opportunities by DrCatHicks · ⭐ 2.4k

  A Claude or Codex skill for deliberate skill development during AI-assisted coding

More Codex Skill Tools

Explore other popular codex skill tools:

• superset ⭐ 14.4k
• humanizer ⭐ 44.3k
• refly ⭐ 7.5k
• nano-banana-pro-prompts-recommend-skill ⭐ 1.9k
• skillshare ⭐ 2.7k
• pi-skills ⭐ 2.5k
• skillkit ⭐ 1.5k
• ai-maestro ⭐ 790
• upskill ⭐ 747
• Claude-to-IM-skill ⭐ 2.9k

Popular TypeScript Agent Tools

• n8n ⭐ 205.5k · MCP Server
• gemini-cli ⭐ 107.1k · MCP Server
• context7 ⭐ 62.2k · MCP Server
• UI-TARS-desktop ⭐ 38.9k · MCP Server
• chrome-devtools-mcp ⭐ 52.4k · MCP Server

Frequently Asked Questions

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

• SlowMist agent-security taxonomy
• Liu et al., An Empirical Study of Agent Skill Security (2026)
• Our census dataset (DOI 10.5281/zenodo.21292799) · Hugging Face mirror
• Full methodology & who runs this