winnode

SUSPICIOUS: the skill is broadly aligned with a local OpenClaw Windows-node control CLI, and install/data-flow evidence points to same-org official infrastructure rather than an obvious credential-stealing proxy. However, the capability scope is very expansive for an agent skill: it can execute commands, evaluate scripts, read sensitive app/chat/device state, control browser proxying, modify settings, send chat messages, and perform approval/connection actions while also handling local bearer tokens. This looks more like a privileged local control plane than a narrow reference skill, so the main concern is excessive authority and sensitive data access rather than confirmed malware.