openclaw-management
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s behavior fits OpenClaw task orchestration, but the trust boundary is inconsistent with its presentation because it relies on a non-official third-party `openclaw-mcp` bridge that receives gateway credentials and all delegated content. This is not confirmed malware, but it is a high credential-forwarding and intermediary data-flow risk.
Confidence: 86%Severity: 81%
Audit Metadata