Security audit
Topical Openclaw Setup
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed OpenClaw setup guide for connecting Topical, with expected local config changes and no evidence of hidden or unrelated behavior.
Before installing, confirm you intend to connect Topical to OpenClaw and are comfortable adding a persistent OpenClaw hook transform and MCP config. Treat the Topical Agent API key, hooks token, and signing secret as credentials, and install the companion @daveangelcode/topical skill only if you trust that publisher.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
57/57 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.