openclaw-desk-pet-macos

SUSPICIOUS: The skill’s capabilities largely fit its stated purpose: local UI control, local file fallback, local gateway access, and task dispatch are coherent for a desktop companion. The main concern is install trust: it asks the agent/user to clone and run scripts from a personal GitHub repo that is not clearly tied to the stated publisher or the OpenClaw org. Data flow stays local to localhost/OpenClaw and no clear credential exfiltration or malicious routing is shown, so this is not confirmed malware, but the provenance mismatch and direct script execution make it medium risk.