Dynamic code execution detected.
Critical
- Code
- suspicious.dynamic_code_execution
- Location
- skills/skill-doctor/skill_doctor.py:254
- Evidence
"Uses eval()/exec() - review what is being executed."),
Security audit
Skill Author Toolkit
Security checks across malware telemetry and agentic risk
Overview
This is a coherent local toolkit for skill authors; its file access and optional publishing actions are disclosed and fit the stated purpose.
Install if you want local tools for auditing, linting, and publishing OpenClaw skills. Before using Publish Helper, review the generated version/changelog changes and the exact clawhub command because it can publish under your logged-in ClawHub account.
VirusTotal
64/64 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dynamic_code_execution