openclaw-master-skills

Warn

Audited by Socket on May 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches a skill index/installer, but it primarily functions as a transitive skill distribution mechanism. No direct credential theft or exfiltration is shown, yet the personal-repo distribution path and bulk installation of many third-party skills create meaningful supply-chain and trust-chain risk.

Confidence: 88%Severity: 52%
Audit Metadata
Analyzed At
May 11, 2026, 10:50 AM
Package URL
pkg:socket/skills-sh/marcoamu%2Fopenclaw-workspace%2Fopenclaw-master-skills%2F@3e207f45a6c79309c6fa7e3103a66391a0e828f0
Security Audit — socket — openclaw-master-skills