nemoclaw-get-started

SUSPICIOUS: the skill's purpose broadly matches its capabilities, but it relies on unpinned remote script execution for install/uninstall and explicitly disables device authentication during onboarding. Those choices create meaningful security risk even without clear evidence of credential theft or malicious data exfiltration.