deploy-openclaw-bot-for-me

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align with deploying a bot, but it outsources core behavior to mutable remote documentation and relies on curl|bash execution on the target server. This is better explained as deployment automation risk and supply-chain trust weakness than confirmed malware, but the broad SSH permission and remote instruction following make it medium risk.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Oct 6, 2026, 11:56 AM
Package URL
pkg:socket/skills-sh/vinta%2Fdear-ai%2Fdeploy-openclaw-bot-for-me%2F@bd7e78ccc35a63968a7ff8e89dd60d4f01a0dcdb08c1765652e67c3fd42e4c05