openclaw-nerve-cockpit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installation and execution via a remote shell script piped from an arbitrary GitHub repository URL (https://raw.githubusercontent.com/daggerhashimoto/openclaw-nerve/master/install.sh), presenting a weak/unknown provenance operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill contains instructions that suggest modifying system configuration files (/etc/sysctl.conf) using sudo privileges to increase file watch limits.