Security audit
Security checks across malware telemetry and agentic risk
OfferCatcher mostly does its stated job, but it reads sensitive email content and includes unguarded reminder-deletion tools that users should review carefully before installing.
Install only if you are comfortable granting Apple Mail and Reminders automation access and having recent email content processed by the OpenClaw LLM workflow. Configure a specific account and mailbox, inspect scan output first, use dry-run before applying events, prefer the ClawHub install path over curl-to-bash, and do not expose the Reminders bridge delete or clear-list commands to unattended automation.
def run_text(cmd: list[str], timeout: int | None = None) -> str:
"""执行命令并返回输出。"""
try:
proc = subprocess.run(
cmd, capture_output=True, text=True, encoding="utf-8", errors="replace", timeout=timeout
)
if proc.returncode != 0:58/58 vendors flagged this skill as clean.
No suspicious patterns detected.