deepseek-openclaw-integration

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the install path is the main problem: it relies on an unverified third-party GitHub repo unrelated to the claimed publisher, despite official same-org OpenClaw/DeepSeek integration already existing. Credential handling in the examples is mostly local and proportionate, but forwarding an API key to a CLI built from an unverifiable repo makes the overall skill high risk.

Confidence: 90%Severity: 83%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:50 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fdeepseek-openclaw-integration%2F@23b5955602a97c156e1ce7b619f22818113907e4246732ccdca20cfbfd0bf190
Security Audit — socket — deepseek-openclaw-integration