Security audit
Zulip
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Zulip bridge helper that relies on a separate Zulip plugin for expected messaging, monitoring, and optional admin actions.
Install only if you intend to connect OpenClaw to Zulip and are comfortable granting the configured plugin authority to send messages and, if enabled, perform admin actions. Keep admin actions disabled unless needed and prefer the newer replacement plugin mentioned by the skill if you want active maintenance.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.