openclaw-chat@1.0.6
VERIFIED· install onlyPublisher claims: "OpenClaw-chat is a mobile app for managing multi-Agent chats, groups, service control, and logs with remote and local sync on Android and iOS." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher johnsun4414 · publishing for 234 daysInstalls 1,043Last detonated 19 min ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-15 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
MEDIUM
npx invocation of non-well-known packageSKILL.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06npx cap add iosFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
URL shortener detecteddist/workbox-8c29f6e4.js:1 · URL shortener detected — destination cannot be verified
AST07…thout revision info: ${e.join(", ")}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(t)}}}install(t){return d(t,async()=>{const e=new y;thi…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.MEDIUM
npx invocation of non-well-known packageSKILL.md:63 · npx invocation of non-well-known package — may execute untrusted code
AST06npx cap add androidFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
URL shortener detectedios/App/App/public/workbox-8c29f6e4.js:1 · URL shortener detected — destination cannot be verified
AST07…thout revision info: ${e.join(", ")}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(t)}}}install(t){return d(t,async()=>{const e=new y;thi…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.MEDIUM
File type combined with upload actiondist/assets/index-aX36dzTn.js:37 · File type combined with upload action — agent may exfiltrate local data files
AST07…d 0,(e.current.flags&128)===128)}catch{}}var Fe=Math.clz32?Math.clz32:od,ld=Math.log,id=Math.LN2;function od(e){return e>>>=0,e===0?32:31-(ld(e)/id|0)|0}var mr=64,hr=4194304;function Tn(e){switch(e&-e){case 1:return 1;case 2:return 2;case …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packageSKILL.md:52 · npx invocation of non-well-known package — may execute untrusted code
AST06npx cap open iosFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actionandroid/app/src/main/assets/public/assets/index-DqHmsSsP.js:37 · File type combined with upload action — agent may exfiltrate local data files
AST07…d 0,(e.current.flags&128)===128)}catch{}}var Fe=Math.clz32?Math.clz32:od,ld=Math.log,id=Math.LN2;function od(e){return e>>>=0,e===0?32:31-(ld(e)/id|0)|0}var mr=64,hr=4194304;function Tn(e){switch(e&-e){case 1:return 1;case 2:return 2;case …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionios/App/App/public/assets/index-aX36dzTn.js:37 · File type combined with upload action — agent may exfiltrate local data files
AST07…d 0,(e.current.flags&128)===128)}catch{}}var Fe=Math.clz32?Math.clz32:od,ld=Math.log,id=Math.LN2;function od(e){return e>>>=0,e===0?32:31-(ld(e)/id|0)|0}var mr=64,hr=4194304;function Tn(e){switch(e&-e){case 1:return 1;case 2:return 2;case …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
URL shortener detectedandroid/app/src/main/assets/public/workbox-8c29f6e4.js:1 · URL shortener detected — destination cannot be verified
AST07…thout revision info: ${e.join(", ")}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(t)}}}install(t){return d(t,async()=>{const e=new y;thi…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.MEDIUM
npx invocation of non-well-known packageSKILL.md:64 · npx invocation of non-well-known package — may execute untrusted code
AST06npx cap sync androidFix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈489 tok
1 file · 71 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.