OpenClaw Unreal Engine
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill and provided plugin files are coherent with the stated purpose (integrating OpenClaw with Unreal Engine): no unexpected credentials, third‑party downloads, or obfuscated code were found and the install path is a simple project-level copy script.
This package is a coherent Unreal plugin scaffold that will be copied into a project's Plugins/ directory and configured to contact an OpenClaw server URL (BaseUrl) with an optional API key. Before installing: 1) Review and keep any API key out of source control (do not commit UPROPERTY values containing secrets). 2) Only point BaseUrl/ApiKey at servers you trust; the plugin will POST task envelopes to /api/unreal/task and may open a WebSocket (both expected behavior). 3) Be cautious about enabling PythonScriptPlugin or remote-execution paths in editor builds — those can allow remote script execution and should be limited to trusted environments. 4) If you need stronger assurance, build the plugin locally and inspect/compile the code yourself; the installer script is a simple copy and does not perform hidden downloads. Overall, the skill appears internally consistent with its stated purpose.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.