Silviu Core

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill provides narrow browser and GitHub preflight runbooks, with no code, installs, credentials, persistence, or hidden data handling shown.

This appears safe to install as an instruction-only guardrail skill. Before using it, be mindful that enabling browser relay connects OpenClaw to the active tab, and GitHub preflight commands will contact GitHub for the repository you choose.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may guide you to turn on the browser relay for an active Chrome tab or contact GitHub to verify repository access before cloning.

Why it was flagged

The skill tells the agent/operator to use OpenClaw browser tooling and GitHub network commands. This is tool use, but it is explicit, narrow, and aligned with the stated runbooks.

Skill content

Browser automation requires an attached tab (Chrome relay ON)... `curl -I https://github.com`; `git ls-remote https://github.com/<owner>/<repo>.git | head`

Recommendation

Use the runbooks only for the intended browser tab and repository, and review commands before running them in sensitive environments.