RateMyClaw
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is internally consistent with its stated purpose: it locally scans your OpenClaw workspace, maps files to a fixed taxonomy, generates a local embedding, and submits structured tags + an embedding to ratemyclaw.com (it does not transmit raw file contents).
This skill appears to do what it says: it scans your workspace locally, produces structured tags, optionally generates a local embedding, and submits only tags/embedding/maturity counts to ratemyclaw.com. Before using it: (1) Inspect the generated_profile.json (the skill asks you to review tags) to confirm nothing sensitive was mis-tagged. (2) Be aware embeddings can be a sensitive fingerprint; only send them if you accept that risk. (3) The script may prompt to install scikit-learn (or you can manually run pip install -r requirements.txt); sentence-transformers is optional and large. (4) If you do not want any network calls, do not approve API key generation or submission. (5) Note a small doc mismatch: TF-IDF embeddings are taxonomy-sized (not always 384 floats) — this is an informational inconsistency only.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.