OpenClaw hardened the skill download target directory validation

Affected Packages / Versions

• Package: openclaw (npm)
• Affected versions: <= 2026.2.14
• Fixed in: planned release 2026.2.15

Impact

A bug in download skill installation allowed targetDir values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only skills.install flow, this could write files outside the intended install sandbox.

Fix Commit(s)

• 2363e1b08 fix(security): restrict skill download target paths
• b6305e972 test(skills): split installer security coverage

Acknowledgement

Thanks @Adam55A-code for reporting.