aliyun-openclaw-setup

SUSPICIOUS. The skill’s overall purpose is coherent for OpenClaw deployment, and most credential/file access is proportionate. However, trust hygiene is meaningfully weakened by curl|bash, unpinned latest installs, GitHub-based plugin installation, and doc-driven expansion to additional channels. The Discord doc mismatch also suggests the instructions may be stale or unreliable. This looks like a legitimate but medium-risk deployment skill, not confirmed malware.