google

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The manual install command downloads a prebuilt gog binary tarball directly from a GitHub releases URL (direct binary distribution from a third-party repo), which is potentially risky unless you trust the openclaw project; the other links are documentation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow invokes the gog CLI to read user-controlled Gmail/Calendar/Drive/Docs/Sheets/Slides content via commands like gog gmail search/get, gog drive search/get/download, and gog docs cat/export, meaning outsider-authored free text contained in those user-accessible sources (e.g., posted emails or Drive/Docs contents) can be ingested by the LLM.