openclaw-security-watchdog

Suspicious. The stated purpose matches a security-audit skill, and the flagged command-injection patterns are documentation-only. The main risk is supply-chain and trust: the skill is presented as ara.so content but installs from CTCT-CT2 via OpenClaw, and optional data leaves the machine to an endpoint not clearly tied to the stated publisher. Broad host access is proportionate for a security scanner, but publisher/source/data-flow inconsistencies prevent a benign classification.