Back to plugin

Security audit

ZooClaw Social

Security checks across malware telemetry and agentic risk

Overview

The social-media assistant features mostly fit the description, but the bundle also contains default Agent Studio control instructions that can redirect the agent away from the advertised ZooClaw Social behavior.

Before installing, verify whether OpenClaw will execute the root AGENTS.md; if so, treat this as an Agent Studio bundle rather than a clean ZooClaw Social runtime unless the publisher removes that scaffolding. If you proceed, expect public trend/web lookups, local storage of brand and draft data, and scheduled reminders. No credential theft, exfiltration, or destructive behavior was evident in the visible artifacts, but some supplied file contents were truncated or omitted, so inspect the full bundle if you need high assurance.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.