Official repo for clawaudit, coming soon as an automated security checker for repositories.

This package is essentially a placeholder: it claims to be an automated security checker but contains no code or instructions and links to a DuckDNS host. That alone isn't evidence of malware, but it's incomplete and comes from an unknown source. Recommended actions before installing or trusting it: 1) Wait for a proper release with an install spec, source repository, and published code (preferably on a reputable host like github.com). 2) Verify the owning entity and an official homepage/contact. 3) Treat the duckdns URL as untrusted — do not provide credentials or secrets to the skill or its site. 4) If you must test it, do so in an isolated environment without access to sensitive data. If you need a working repo-audit tool now, prefer well-known alternatives with published code and documentation.

Type: OpenClaw Skill Name: clawaudit Version: 0.1.0 The skill bundle contains only metadata and a descriptive markdown file. The `SKILL.md` provides a description of the skill and a link to a website (`https://clawaudit.duckdns.org`). There are no instructions for the AI agent to perform any actions, no code to execute, no attempts at data exfiltration, and no signs of prompt injection or malicious intent. The content is purely informational and promotional.