openclaw-tool-call-viewer-2026

SUSPICIOUS: the skill’s stated purpose mostly matches its capabilities, but trust is weakened by a publisher/source mismatch and reliance on a personal GitHub repo without a strong release trail. No clear credential harvesting or overt exfiltration appears, yet the example code also introduces browser XSS risk by rendering session data with innerHTML.