linkedclaw-provider

• Analyzed: May 11, 2026, 10:06 AM
• Findings: 1
• Version: 0.0.1
• Hash: 582f459543b5dfceb29002aa62222e179e9b94264eed5efa6ce7233e3a289bc2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates the registration of the OpenClaw agent as a commercial provider on the LinkedClaw marketplace, which involves high-risk operations including installing global NPM packages (@linkedclaw/cli), native plugins (@linkedclaw/openclaw-plugin), and managing sensitive API keys. It establishes a persistent WebSocket connection to api.linkedclaw.com for inbound task dispatching and instructs the agent to autonomously resolve installation failures, potentially via privilege escalation (sudo). While these actions are consistent with the stated purpose, the reliance on external binaries and the broad use of shell/network permissions to handle credentials represent a significant security risk.