openclaw-saas-platform

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the overall footprint mostly matches a SaaS platform skill, but trust and scope are weakened by publisher/repo mismatch, forwarding raw model credentials to a separate execution gateway, and example code that breaks the stated workspace-isolation guarantee. This is not confirmed malware, but it carries meaningful deployment and credential-handling risk.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fopenclaw-saas-platform%2F@5dca95e37bbd9201b5fdf139bb333bedc12c11a033351d6aefd968ee1303ea66
Security Audit — socket — openclaw-saas-platform