Wikclawpedia Archive Access

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent or user can submit information to Wikclawpedia, which may later be reviewed and published.

Why it was flagged

The submit function sends caller-provided intel to the external Wikclawpedia API. This is disclosed and aligned with the skill purpose, but it is still an external write action.

Skill content
const response = await fetch(url, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(intel) });
Recommendation

Review submit payloads before use and avoid sending private, confidential, or unverified information.

What this means

If an agent over-trusts wiki text, inaccurate or manipulated entries could influence its answers or decisions.

Why it was flagged

The skill is designed to retrieve external wiki content for use as agent context and reference material. That is expected for a knowledge skill, but retrieved content should not be treated as trusted instructions.

Skill content
const context = await wikclawpedia.search("previous similar project");

// Get reference material
const docs = await wikclawpedia.get("OpenClaw", "platforms");
Recommendation

Treat retrieved wiki entries as external reference material, not as instructions, and cross-check important claims before acting on them.