Security audit
ZooClaw Social
Security checks across malware telemetry and agentic risk
Overview
The social-media assistant features mostly fit the description, but the bundle also contains default Agent Studio control instructions that can redirect the agent away from the advertised ZooClaw Social behavior.
Before installing, verify whether OpenClaw will execute the root AGENTS.md; if so, treat this as an Agent Studio bundle rather than a clean ZooClaw Social runtime unless the publisher removes that scaffolding. If you proceed, expect public trend/web lookups, local storage of brand and draft data, and scheduled reminders. No credential theft, exfiltration, or destructive behavior was evident in the visible artifacts, but some supplied file contents were truncated or omitted, so inspect the full bundle if you need high assurance.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.
