cro_skill

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: croskill Version: 1.0.0 The skill bundle provides a mock implementation of a 'Chief Risk Officer' tool for risk assessment. The Python code (cro_skill.py) contains only static logic and hardcoded responses based on input types, with no network access, file system interaction, or use of dangerous functions. The documentation (SKILL.md) and configuration files (clawhub.json, _meta.json) are consistent with the stated purpose and contain no malicious instructions or prompt injection attempts.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less external context for who maintains the skill or where updates come from.

Why it was flagged

The package does not provide a source repository or homepage, which limits provenance verification even though the included code is simple and the static scan is clean.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included source before installing and prefer packages with clear source and maintainer information for production use.