openclaw-management

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s behavior fits OpenClaw task orchestration, but the trust boundary is inconsistent with its presentation because it relies on a non-official third-party `openclaw-mcp` bridge that receives gateway credentials and all delegated content. This is not confirmed malware, but it is a high credential-forwarding and intermediary data-flow risk.

Confidence: 86%Severity: 81%
Audit Metadata
Analyzed At
Apr 10, 2026, 01:59 AM
Package URL
pkg:socket/skills-sh/freema%2Fopenclaw-mcp%2Fopenclaw-management%2F@2369902ed1e58456453d331d5793c191aa04705e