openclaw-setup-service

SUSPICIOUS: the skill is broadly consistent with a catalog-generated API wrapper, but its purpose is vague and execution relies on an opaque remote backend that receives the API key and user parameters. Risk is moderate from limited transparency and remote credential/data forwarding, not from confirmed malware.