alibabacloud-openclaw-skill-security-scan

SUSPICIOUS: the core behavior is coherent with a security scanning skill, but two factors raise concern: mandatory self-exclusion from scanning and remote upload of packaged local skills for cloud analysis. Install trust is better than a random downloader because the CLI appears official, yet the exact publisher relationship remains only partially verified. No clear credential theft or overtly malicious behavior is shown, so this is not confirmed malware, but it carries medium security risk.