openclaw-master-skills

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is a meta-installer/catalog for a very large third-party skill collection, so its main risk is transitive trust and expanded supply-chain exposure rather than direct malware behavior. The install methods are plausible and partly aligned with official OpenClaw tooling, but the repo-to-publisher relationship is mixed and the collection's breadth plus downstream npm/pip installs make the footprint broader than a simple skill browser.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 08:48 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fhermes-skills%2Fopenclaw-master-skills%2F@9cb07cc4cb99c70384c0a6e23cd48dccc4e354961f64b9c90791f36c6347d05a
Security Audit — socket — openclaw-master-skills