openclaw

SUSPICIOUS: the skill’s broad operational scope is mostly aligned with its stated purpose, but it combines remote installer trust risk, plugin/transitive trust, browser automation, messaging, and scheduled actions in one powerful control surface. No clear credential theft or malicious exfiltration is shown, but the capability breadth and actionability make it medium risk.