openclaw-chinese-ai-assistant

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill largely matches its stated purpose as an OpenClaw deployment guide, but it promotes a forked package and container from entities different from the skill publisher, includes unofficial third-party API endpoint examples, exposes persistent/network-accessible services, and instructs transitive skill installation. No confirmed malware or direct exfiltration is shown, but trust and scope are broader than a simple localization guide.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fopenclaw-chinese-ai-assistant%2F@d02dd8237c2f91b080ad1b8a5694626679161339f363ef7fe7ff60d9f4da807a