Security audit
OpenClaw Kazakh IME
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Kazakh input method that adds keyboard mapping and a virtual keyboard to the OpenClaw web UI.
Install this only if you want the Kazakh IME active in the OpenClaw control UI. Note the added script tag and copied file so you can remove them later, and expect the script to affect text inputs on the modified page while loaded.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.