skills/reason-machines/hermes-skills/openclaw-master-skills/Socket

openclaw-master-skills

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the top-level collection appears legitimately linked to MyClaw.ai/OpenClaw, but its real footprint is broad transitive installation of 1209+ mixed-origin skills with unpinned downstream dependencies and potentially wide credential needs. The main concern is disproportionate supply-chain scope for a single skill entry, not confirmed malware or direct exfiltration in this top-level document.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Sep 12, 2026, 06:51 PM

Package URL

pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fopenclaw-master-skills%2F@9cb07cc4cb99c70384c0a6e23cd48dccc4e354961f64b9c90791f36c6347d05a