openclaw-audit-watchdog

SUSPICIOUS: The skill's core behavior matches its stated purpose: schedule OpenClaw security audits and deliver reports. Main risk comes from unattended persistence and outbound delivery of audit data, not from clear malware indicators. Install provenance is relatively strong because downloads are same-org GitHub release artifacts with signature/checksum verification, so this is better classified as a medium-risk automation/reporting skill rather than malicious.