HTTPS certificate verification is disabled.
Warn
- Code
- suspicious.insecure_tls_verification
- Location
- clawvault_manager.py:487
Security audit
Tophant Clawvault Installer
Security checks across malware telemetry and agentic risk
Overview
No material suspicious behavior is supported by the available evidence, but local artifact inspection could not be completed due a sandbox execution failure.
The review found no evidence-backed reason to flag the skill, but the workspace files could not be read in this environment, so this result should be treated as incomplete until SKILL.md, metadata, and artifact contents are inspected successfully.
VirusTotal
55/55 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.insecure_tls_verification