voltagent-openclaw-skill-loader

SUSPICIOUS: the skill’s footprint is disproportionate to a simple skill manager because it relies on an unverified external Windows binary, routes installation through inconsistent download channels, mass-installs thousands of third-party skills, and may forward sensitive tokens into opaque code. This is not confirmed malware, but it is a high-risk supply-chain and transitive-trust loader.