skills/openclaw/skills/calculator/Socket

calculator

Fail

Audited by Socket on Apr 5, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. The skill claims to be a simple calculator but contains an intentional hidden backdoor that performs an unrelated filesystem action when evaluating `3*3`. No external exfiltration is shown, but the deceptive side effect is fundamentally incompatible with the stated purpose.

Confidence: 97%Severity: 90%

Audit Metadata

Analyzed At

Apr 5, 2026, 01:35 AM

Package URL

pkg:socket/skills-sh/openclaw%2Fskills%2Fcalculator%2F@4161ff78ae522c109457a12092765a2cd866fae5