openclaw-design

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is benign design routing, but the skill also instructs execution of a third-party skills CLI and mutable default-branch guidance updates, plus transitive loading of other skills. No credential harvesting or clear malicious behavior is present, but the install/update footprint is broader than necessary for a simple design guide.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:29 AM
Package URL
pkg:socket/skills-sh/openclaw%2Fcarapace%2Fopenclaw-design%2F@ec379f965540bfe118eff43154c4d1992b8d964d632a358ed82d262f090c5548
Security Audit — socket — openclaw-design