Security audit
Security checks across malware telemetry and agentic risk
This skill mostly performs the promised 1688 inquiry reporting, but its Access Key setup is under-scoped and writes credentials under a different skill identity.
Review before installing. Use only where 1688 business report access is intended, avoid pasting production Access Keys into normal chat, and verify where OpenClaw stores the key. Treat generated reports as sensitive because they may include buyer IDs, inquiry summaries, and employee performance data. Static scan was clean and VirusTotal telemetry was absent, so this is Review rather than malicious.
headers = {}
if token:
headers["Authorization"] = f"Bearer {token}"
resp = requests.patch(f"{gateway_url}/api/config",
headers=headers, json=payload, timeout=5)
return resp.ok
except Exception:VirusTotal findings are pending for this skill version.
No suspicious patterns detected.