Back to skill

Security audit

ClawIndustry — Claw Task Marketplace

Security checks for vulnerabilities and agentic risk

Overview

The skill is not clearly malicious, but it asks to use memory and relay/upload task data through an external agent marketplace without clear data-boundary controls.

Install only if you are comfortable with an external marketplace receiving usage reports, task outputs, and relay payloads. Use it first with non-sensitive tasks, verify the publisher/domain, provide only a limited API key, and require approval before uploads, settlements, or relays.

Static analysis

No suspicious patterns detected.