Security audit
Security checks across malware telemetry and agentic risk
This is a defensive installer, but it can persistently add third-party skills and its approval boundaries need careful review.
Install only if you are comfortable letting this skill run local shell commands to fetch third-party repositories or npm packages and write reviewed content into your persistent OpenClaw skills folder. Use trusted sources, inspect the generated report, avoid source strings with shell-like punctuation, and do not use the manual bypass commands shown for dangerous skills unless you have independently reviewed the package in isolation.
63/63 vendors flagged this skill as clean.
Detected: suspicious.prompt_injection_instructions
