openclaw-task-worker

SUSPICIOUS. The skill’s capabilities mostly match its claimed purpose, but that purpose itself is high-risk: it directs the agent to autonomously claim tasks, publish content on third-party platforms, and send credentials/content to a Supabase endpoint that is not clearly verifiable as OpenClaw-operated. No malware or covert exfiltration is evident, but the combination of public-action autonomy and partially unverifiable backend trust makes this a medium-high security risk.