Security audit
Latitude Observability
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed configuration guide for sending OpenClaw trace telemetry to Latitude, with no executable code in the artifact.
Install this only if you want OpenClaw telemetry sent to Latitude or your self-hosted Latitude endpoint. Review what trace metadata your organization permits externally, and do not enable raw prompt or response capture unless your retention and privacy policies allow it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.