openclaw-relay

SUSPICIOUS: the skill is largely purpose-aligned as a relay/bridge, but it handles raw gateway tokens, supports authenticated posting to external sessions/channels, and defaults to a personal SSH host. No clear malware or deceptive installer behavior is present; the main risk is credentialed message relay and remote-action capability.