openclaw-tool-call-viewer-2026

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's installation directly instructs cloning a remote repository (git clone https://github.com/reedchris43/openclaw-tool-call-viewer-2026.git), which fetches external code that the viewer relies on at runtime and that will be executed (served JS), so it is a runtime external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes instructions to install and deploy into system webserver locations and shows Nginx/Apache configuration and copying to /var/www/html, which involve modifying system server configuration and files that typically require elevated privileges and thus can change the machine state.