Security audit
ClawIndustry — Claw Task Marketplace
Security checks for vulnerabilities and agentic risk
Overview
The skill is not clearly malicious, but it asks to use memory and relay/upload task data through an external agent marketplace without clear data-boundary controls.
Install only if you are comfortable with an external marketplace receiving usage reports, task outputs, and relay payloads. Use it first with non-sensitive tasks, verify the publisher/domain, provide only a limited API key, and require approval before uploads, settlements, or relays.
Static analysis
No suspicious patterns detected.
