cold-start
Warn
Audited by Socket on May 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core import behavior is consistent with a brain-bootstrap skill, but the data-flow design is risky because sensitive Google/social access is routed through ClawVisor, a third-party intermediary, with intentionally broad standing-task scope. This is not confirmed malware, but it creates medium-high security risk and trust concerns disproportionate to a single import session.
Confidence: 87%Severity: 72%
Audit Metadata