bee-languages-get

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill does what it says: it sends a Bee API key to the Bee/Tradew API to retrieve enabled website languages.

This appears safe for its stated purpose. Before installing, confirm you trust the Bee/Tradew service and provide the API key through OpenClaw’s secret or environment configuration rather than typing it into ordinary chat messages.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI03: Identity and Privilege Abuse
Low
What this means

Your Bee API key will be sent to the Tradew/Bee API to retrieve the language list.

Why it was flagged

The skill uses the provided API key as a bearer credential when calling the Bee/Tradew language endpoint. This is purpose-aligned, but users should understand that the credential is being used for provider API access.

Skill content
"Authorization": `Bearer ${API_KEY}`
Recommendation

Use a properly scoped API key if available, provide it through the configured environment/secret mechanism rather than plaintext prompts, and only install this if you trust the Bee/Tradew API integration.