metamask-openclaw-desktop-security-analysis

Fail

Audited by Snyk on Jun 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This repository and associated executables show clear, intentional malicious behavior—brand impersonation combined with distribution of unsigned .exe binaries (no source), likely containing credential theft (browser/profile scraping of seed phrases), clipboard/address replacement, keylogging/session hijacking, and hidden exfiltration to attacker-controlled C2 endpoints (Telegram/Discord/webhooks)—consistent with a high-confidence cryptocurrency-scamming/malware operation.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

  • Hidden Unicode characters detected (1 type(s) found)

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W021
MEDIUM

Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 14, 2026, 08:46 AM
Issues
2
Security Audit — snyk — metamask-openclaw-desktop-security-analysis