Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real security scanner, but it needs Review because its privacy, local-only, telemetry, and social-reputation behavior are broader than users may expect.
Install only if you are comfortable with a broad security scanner inspecting sensitive local signals and potentially publishing detailed posture results to an external Trust Center. Run --dry-run first, review the exact JSON payload, use --local-only with caution because some checks and Moltbook enrichment may still perform network activity, use --no-notify to avoid the npx fallback, and enable the cron schedule only if you want recurring scans.
"""
# Method 1: openclaw in PATH
try:
proc = subprocess.run(
["openclaw", "notify", "--message", message],
capture_output=True, text=True, timeout=15
)# Method 3: Try npx
try:
proc = subprocess.run(
["npx", "--yes", "openclaw", "notify", "--message", message],
capture_output=True, text=True, timeout=30
)"Accept": "application/json",
})
ssl_context = get_ssl_context()
with urllib.request.urlopen(req, timeout=15, context=ssl_context) as resp:
return json.loads(resp.read().decode("utf-8"))# Get SSL context with proper certificate handling
ssl_context = get_ssl_context()
with urllib.request.urlopen(req, timeout=30, context=ssl_context) as response:
result = json.loads(response.read().decode('utf-8'))
if result.get("success"):
return True, "Telemetry sent successfully"66/66 vendors flagged this skill as clean.
No suspicious patterns detected.