Investment Advisor Zhang Openclaw Cn
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Baidu web-search helper that uses a local API service and a Baidu API key for its stated purpose.
Reasonable to install if you want Baidu AI search. Keep the service bound to localhost, protect the .env file, use a revocable Baidu API key, and avoid sending confidential search queries unless Baidu's handling of that data is acceptable for your use case.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
67/67 vendors flagged this skill as clean.