DataForSEO
AdvisoryAudited by Static analysis on May 13, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the plugin gives OpenClaw additional tool capabilities supplied by ClawLink.
The skill requires a separate plugin installation even though the package itself is instruction-only with no install spec. This is disclosed and central to the stated ClawLink integration.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install only if you trust the ClawLink plugin source and verify the plugin/package before authorizing accounts.
A paired ClawLink device can use the connected DataForSEO integration according to the permissions granted through ClawLink.
The skill discloses local credential storage and transmission to ClawLink for device pairing. This is expected for the integration but is still delegated account authority.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use the official ClawLink domain, do not paste raw credentials into chat, and disconnect or revoke the integration when no longer needed.
Some DataForSEO actions may change account-side state or consume provider credits if the user approves them.
The skill can invoke dynamically discovered external DataForSEO tools, including possible write or credit-consuming actions, but it instructs preview and user confirmation for higher-impact operations.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Review previews and confirmations carefully, especially for bulk, write, or paid DataForSEO jobs.