openclaw-design
Warn
Audited by Socket on Jul 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is benign design routing, but the skill also instructs execution of a third-party skills CLI and mutable default-branch guidance updates, plus transitive loading of other skills. No credential harvesting or clear malicious behavior is present, but the install/update footprint is broader than necessary for a simple design guide.
Confidence: 90%Severity: 58%
Audit Metadata