Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently delegates research to CellCog, with expected considerations around sharing prompts, paid usage, and installing dependencies.
Research prompts and included context are sent to CellCog, so share confidential information only when authorized. Review and preferably pin dependency versions before installation. Check credit costs and the notification destination; OpenClaw completion delivery uses a background component. Request citations explicitly and verify consequential research conclusions.
The usage workflow passes the user's task prompt to CellCog through client.create_chat. Although the skill identifies CellCog as its provider, it does not explicitly warn that prompt contents are transmitted to an external service, which is relevant for confidential investment, company, or due-diligence research.
The setup command invokes an unpinned npm CLI through npx skills, allowing the package version executed during installation to change without review. A compromised or malicious release could execute code with the installing user's permissions; however, this is an optional installation path, and the static finding's characterization as an MCP server reference is incorrect.
