Skills/ClawHub/clawapi-skill

clawapi-skill@1.3.0

CAUTION· install only

Publisher claims: "Build your AI Company — 8 models across 4 providers act as your CEO, CTO, CMO, CFO, and Workers. Crypto-native, pay-as-you-go with USDC/USDT. No GPU needed." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher clawapiorg · publishing for 244 daysInstalls 1,104Last detonated 19 min ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 76/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Hidden zero-width characters detected; Hidden zero-width characters detected. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:236 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files| Billing error after key update | Must update key in BOTH `~/.openclaw/.env` AND `~/.openclaw/agents/main/agent/models.json` then restart gateway |Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Hidden zero-width characters detectedSKILL.md:217 · Hidden zero-width characters detected — may conceal content- 👩‍💼 CEO (Opus): ~$0.08/request — mission decomposition, complex decisionsFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedSKILL.md:111 · Hidden zero-width characters detected — may conceal content| `claude-opus-4-6` | 👩‍💼 CEO | Official Anthropic API | $5 / $25 | Slow | Mission decomposition, complex decisions, strategic planning |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedSKILL.md:112 · Hidden zero-width characters detected — may conceal content| `gpt-5.4` | 👨‍💻 CTO | Official OpenAI API | $2.50 / $15 | Medium | Technical architecture, coding, default daily driver |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Agent configured for autonomous execution without human approvalSKILL.md:239 · Agent configured for autonomous execution without human approval## Agent Autonomous Setup (No Human Needed)Fix: Declare and request only the permissions the task needs.
AST02
HIGH
Hidden zero-width characters detectedSKILL.md:126 · Hidden zero-width characters detected — may conceal content- **👨‍💻 CTO** → `gpt-5.4` — Technical architecture, coding, default daily driver ($2.50/$15)Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedSKILL.md:125 · Hidden zero-width characters detected — may conceal content- **👩‍💼 CEO** → `claude-opus-4-6` — Mission decomposition, complex decisions, strategic planning ($5/$25)Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Access to sensitive file pathsSKILL.md:300 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files~/.openclaw/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:308 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…Critical:** OpenClaw loads the API key from `models.json` at runtime, NOT from `.env`. If you only update `.env`, requests will still use the old key from `models.j…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈3,498 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

4 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim clawapiorg: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  4. Agent configured for autonomous execution without human approval≈ +4 on the totalDeclare and request only the permissions the task needs.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim clawapiorgPropose a patch to the maintainer