DocsForAI
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill is internally consistent with being a documentation crawler: it requires a docsforai binary, installs from PyPI, and instructs the agent to crawl and persist docs under ~/.openclaw; there are minor issues to check (install fallback, version metadata, and a few filesystem/network implications).
This skill appears to do what it says, but check a few things before installing: 1) Verify the docsforai PyPI/GitHub project yourself (author, recent releases, and source) rather than relying on SKILL.md metadata — the listed versions are inconsistent. 2) Prefer installing with 'uv' (isolated) instead of the pip fallback; the fallback suggests --break-system-packages which can modify system Python. 3) Be aware it will fetch arbitrary websites (network access) and persist files to ~/.openclaw/workspace/skills/docsforai/docs; ensure that location is acceptable. 4) The skill reads/appends MEMORY.md — inspect that file for sensitive data before allowing the skill to access it. 5) Confirm the agent environment provides the expected file-display command (examples use 'read' which may be a placeholder); if not, adjust to safe viewers like cat/less. If you want stronger assurance, review the docsforai package source code on GitHub and run the crawler in an isolated environment (container or VM) first.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.