Back to skill
v1.0.1

NovelAI OpenClaw Adaptor

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:24 AM.

Analysis

This is an instruction-only setup guide that is coherent with its stated purpose and includes appropriate cautions about verifying packages and keeping NovelAI credentials out of chat.

GuidanceThis skill appears safe as a configuration guide. Before installing or running any NovelAI adaptor package, verify its source and maintainer, approve the install explicitly, and keep your real NovelAI credential in the local adaptor configuration rather than in chat.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities
SeverityLowConfidenceHighStatusNote
SKILL.md
pip install novelai-openclaw-adaptor

The skill gives an optional package installation example for a local adaptor. This is aligned with the purpose, and the skill repeatedly says to verify the package source first, but users should still notice the package provenance before installing.

User impactInstalling an unverified adaptor package could run third-party code on the user's machine.
RecommendationVerify the package source, maintainer, repository, and release history before installing, and only run install commands after explicit user approval.
Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse
SeverityLowConfidenceHighStatusNote
SKILL.md
NovelAI credential through local input

The local adaptor configuration is expected to use a NovelAI credential. The skill appropriately says not to paste secrets into chat, but this remains sensitive account access.

User impactThe local adaptor may be able to use the user's NovelAI account according to the credential provided during local setup.
RecommendationEnter credentials only through the verified local configuration flow, avoid sharing them in chat, and use the least-privileged or revocable credential available.