Security audit
Security checks across malware telemetry and agentic risk
BigA is a disclosed stock-analysis and alerting skill, but it automatically sends messages and installs scheduled jobs with broad trigger phrases and limited confirmation controls.
Install only if you want BigA to run stock scans, search market news, send alerts to a configured chat target, and create recurring scheduled jobs. Review the destination channel/target, cron schedule, and disable/update process first; avoid installing it in shared or public channels unless automatic stock-alert posting is acceptable.
for i, seg in enumerate(segs):
if not seg: continue
for attempt in range(3):
p = subprocess.Popen(
[openclaw_bin, "message", "send",
"--channel", channel,
"--target", target,63/63 vendors flagged this skill as clean.
No suspicious patterns detected.