gitclaw-backup

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core behavior fits its stated backup purpose, but it has a broad data-export footprint, can expose GitHub credentials during troubleshooting, and relies on a not-fully-verified personal GitHub publisher/repo relationship. This looks more like a high-impact backup automation skill than confirmed malware, but it carries meaningful security risk.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Oct 9, 2026, 01:44 PM
Package URL
pkg:socket/skills-sh/blessonism%2Fopenclaw-skills%2Fgitclaw-backup%2F@5632be8f8e4e14c3c209e913a4fc9c4e12707ec4e91d656c714fe50e79c65a9d