Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- test.js:21
Security audit
Clawpilot
Security checks across malware telemetry and agentic risk
Overview
Clawpilot appears to be a local skill-recommendation advisor that does not install skills automatically; its notable risks are limited to advisory trust, incomplete provenance, and a test script that can run the Python handler.
This skill looks coherent and proportionate for a recommendation advisor. Before installing, remember that it does not actually vet or install other skills for you: review any recommended skill separately, be cautious with legal/medical/mental-health recommendations, and only run the included test script if you intentionally want to execute the local handler.
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec