Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
High Risk
openclaw-backup
Missing implementation scripts
Manual upload Apr 5, 2026
Open Report ↗
High Risk
claw-ops-manager
Undeclared Shell Command Execution
Manual upload Apr 5, 2026
Open Report ↗
Review
hpr-solver
Undeclared LLM API calls to OpenRouter
Manual upload Apr 5, 2026
Open Report ↗
Review
fund-daily
Undeclared network API access
Manual upload Apr 5, 2026
Open Report ↗
Review
stock-prediction
Undeclared shell command execution
Manual upload Apr 5, 2026
Open Report ↗
High Risk
hive-commander
Covert credential extraction from runtime environment
Manual upload Apr 5, 2026
Open Report ↗
Review
抖音视频无水印下载器
Undocumented third-party proxy API
Manual upload Apr 5, 2026
Open Report ↗
Review
cloud-share-downloader
Undeclared credential solicitation
Manual upload Apr 5, 2026
Open Report ↗
Review
research-archive-query
Undeclared subprocess/shell execution
Manual upload Apr 5, 2026
Open Report ↗
High Risk
gangtise-kb
Undeclared subprocess execution with missing binary
Manual upload Apr 5, 2026
Open Report ↗
Review
harbor-openclaw
Undeclared network behavior on first load
Manual upload Apr 5, 2026
Open Report ↗
Review
airoom.ltd-Global-Finance-Data-Platform
HTTP target URL without TLS encryption
Manual upload Apr 5, 2026
Open Report ↗
High Risk
face-analysis
Hardcoded Database Credentials in config.yaml
Manual upload Apr 5, 2026
Open Report ↗
Review
imap-idle-sneder
Hardcoded email credentials in source code
Manual upload Apr 5, 2026
Open Report ↗
Review
OnionClaw
Missing implementation code—only documentation present
Manual upload Apr 5, 2026
Open Report ↗
Review
sshot
Critical script artifact not included in package
Manual upload Apr 5, 2026
Open Report ↗