Clawmart Install

• Outcome: Review
• Latest audit: May 29, 2026 at 9:29 PM UTC
• Version:
  1.2.3

Overview

This is a legitimate ClawMart installer, but it can persistently change OpenClaw behavior from remote pack contents and stores an API token locally without enough containment.

Review before installing. Use it only with ClawMart packs and publishers you trust, inspect target paths and downloaded file names when possible, keep the backup location, and treat ~/.openclaw/clawmart-config.json as sensitive because it stores the API token.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The trigger phrase is broad enough to match ordinary user requests, which can cause the install workflow to activate unexpectedly. In this skill, unexpected activation is more dangerous than usual because the workflow can write files, overwrite workspace contents, and persist tokens to disk.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The description does not warn that using the skill may write into the user's OpenClaw directories, overwrite existing files, and persist credentials. That omission weakens informed consent and increases the chance a user invokes a state-changing installation flow without understanding the risks.

VirusTotal

64/64 vendors flagged this skill as clean.