[openclaw] OpenClaw: Reject symlinks in local skill packaging script

**[openclaw] OpenClaw: Reject symlinks in local skill packaging script**

Vulnerability skills/skill-creator/scripts/package_skill.py (a local helper script used when authors package skills) previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the resulting archive can include unintended file contents. Severity and Exposure Severity: Low Execution context: local/manual workflow only (skill author packaging step) No remote trigger: this is not reachable via normal OpenClaw gateway/chat runtime paths No extraction Zip Slip in this finding: this issue is limited to packaging-time symlink following Impact Potential unintentional disclosure of local files from the packaging machine into a generated .skill artifact. Requires local execution of the packaging script on attacker-controlled skill contents. Affected Components skills/skill-creator/scripts/package_skill.py Affected Packages / Versions Package: openclaw (npm) Latest published version during triage: 2026.2.17 Vulnerable version range: <= 2026.2.17 Planned patched version (next release): 2026.2.18 Remediation Reject symlinks during skill packaging...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.