openclaw-android-setup

SUSPICIOUS. The skill’s functionality broadly matches its Android setup purpose, but its core install path is a remote pipe-to-shell from a custom domain with unclear ownership linkage to the stated publisher. No direct credential exfiltration is shown in the provided text, but install-trust and provenance are not strong enough for a benign classification.