ac-openclaw

SUSPICIOUS. The skill’s capabilities mostly match its stated OpenClaw deployment purpose, so it does not look fundamentally deceptive. However, it combines broad secret handling, many same-session remote installers, admin-level host changes, optional autonomous/public posting, and dynamic web-sourced instructions. This is a coherent but high-footprint infrastructure skill with elevated supply-chain and credential-handling risk rather than confirmed malware.