Back to plugin

Security audit

Aigroup Financial Services Openclaw Release

Security checks across malware telemetry and agentic risk

Overview

Prompt-injection indicators were detected in the submitted artifacts (base64-block, unicode-control-chars); human review is required before treating this skill as clean.

Before installing, make sure you trust this publisher and the companion office/MCP tools you plan to use. Review the preflight/setup commands, install only needed runtimes, and avoid running the template-skill creator or document workflows on confidential files unless the local host skills and bundled binaries are acceptable for your environment. ClawScan detected prompt-injection indicators (base64-block, unicode-control-chars), so this skill requires review even though the model response was benign.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.