Motion
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a clearly disclosed Motion integration through ClawLink, but using it requires trusting the ClawLink plugin/service with access to Motion data and approved task changes.
Before installing, verify that you trust the ClawLink plugin and service, connect only the intended Motion account, and carefully review any preview before approving task, assignment, due-date, or bulk schedule changes.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The user must trust the ClawLink plugin and its source because the plugin will provide the actual tools used to access Motion.
The skill itself has no code, but it depends on a separate plugin installation that is outside this artifact set.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the stated trusted registry/source and review ClawLink’s verification and documentation before connecting accounts.
Pairing ClawLink and connecting Motion allows OpenClaw via ClawLink to access the connected Motion account within the approved permissions.
The skill discloses persistent delegated authentication through ClawLink, which is expected for the integration but grants ongoing access authority.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Connect only the intended Motion account, review the permissions during setup, and do not paste raw credentials into chat.
Approved tool calls could modify tasks, due dates, assignments, or statuses in Motion.
The skill can trigger Motion write actions, including task and schedule changes, but it explicitly requires confirmation for sensitive or bulk changes.
Create or update tasks after confirmation ... Confirm before changing assignments, due dates, or task status in bulk
Review previews carefully and confirm only changes you actually want, especially for bulk or schedule-sensitive updates.
Motion data and tool requests may pass through ClawLink as part of the connected integration workflow.
Motion access is mediated by a third-party integration hub, creating an external trust boundary for credentials, tool discovery, and data exchange.
Powered by [ClawLink](https://claw-link.dev), an integration hub for OpenClaw that handles hosted connection flows and credentials
Use this skill only if you trust ClawLink’s service and are comfortable routing Motion integration activity through it.