Security audit
clawrtc
Security checks across malware telemetry and agentic risk
Overview
The skill mostly matches its stated crypto-mining purpose, but it sends device identifiers like MAC addresses and hostname despite telling users that personal data is not sent.
Review this carefully before installing. If you run it, expect ongoing CPU/network use for token mining and remote hardware attestation. The current disclosure does not clearly state that MAC addresses and hostname are sent, so avoid installing unless you are comfortable sharing those device identifiers with the RustChain node.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.