Security audit
Security checks across malware telemetry and agentic risk
This skill is mostly transparent about analyzing URLs, but it can automatically install or replace local OpenClaw skills from cloned repositories after only a narrow review.
Install only if you are comfortable with a URL-processing skill that can clone arbitrary repositories and install third-party skills into your local OpenClaw environment. Review each proposed skill manually before installation, avoid untrusted or private repository URLs, and back up existing installed skills because same-name installs can be replaced.
def clone_repo(url: str, staging_dir: str):
subprocess.run(
["git", "clone", "--depth", "1", url, staging_dir],
check=True, capture_output=True, text=True,
)def clone_repo(url: str, dest: str):
subprocess.run(
["git", "clone", "--depth", "1", url, dest],
check=True, capture_output=True, text=True,
)def run_cloc(root: pathlib.Path):
try:
result = subprocess.run(
["cloc", "--json", "."],
cwd=str(root),
capture_output=True,def clone_repo(url: str, staging_dir: str):
subprocess.run(
["git", "clone", "--depth", "1", url, staging_dir],
check=True, capture_output=True, text=True,
)def clone_repo(url: str, dest: str):
subprocess.run(
["git", "clone", "--depth", "1", url, dest],
check=True, capture_output=True, text=True,
)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.