fuel

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The core config-tuning purpose is plausible, but the skill goes beyond optimization by instructing autonomous payment actions and routing all inference through OpenClaw's proxy. The third-party gateway and hidden provider abstraction may be acceptable for this product, but the autonomous checkout/top-up behavior makes the overall skill high risk.

Confidence: 88%Severity: 83%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:41 PM
Package URL
pkg:socket/skills-sh/openclaw-rocks%2Fskills%2Ffuel%2F@00fb9ecde9aa1c092e5b2e09e38f2bb48ce85e26