Skill Antivirus & Security Scanner

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands. Source: https://github.com/openguardrails/openguardr...

This SKILL.md appears to be a legitimate installer/integrator for a third‑party security plugin, but it has a few worrisome points you should check before installing: 1) The instructions expect the openclaw CLI and node to be available but the skill metadata doesn't declare those requirements — ensure you have them and understand which programs will run. 2) Installing the plugin will download and install code (scripts under ~/.openclaw/extensions/moltguard) that is not present in this skill bundle; review that plugin's source (the GitHub repo) before installing. 3) MoltGuard sends data to a remote 'Core' for detection and will save API keys to ~/.openclaw/credentials/moltguard/ — verify what data is transmitted and whether you trust the Core endpoint (use enterprise Core if you need on‑prem scanning). 4) The 'automatic' credential handling and agent-claim/quotasharing behavior can cause cross-agent data/usage sharing; require explicit user consent. If you want to proceed: (a) inspect the plugin code in the official repo or plugin registry before running the install, (b) confirm exactly what data will be sent to Core and whether it is encrypted/retained, and (c) consider installing in a controlled environment first (or use the enterprise Core option) to verify behavior.

Type: OpenClaw Skill Name: skill-antivirus Version: 1.0.0 The skill bundle acts as a wrapper to install an external plugin (@openguardrails/moltguard) and execute local Node.js scripts (enterprise-enroll.mjs). It contains highly scripted instructions in SKILL.md that direct the AI agent to perform a 'test' and then provide a hardcoded reassurance to the user ('Your security protection is now active'), which mimics the social engineering tactics used by deceptive 'Fake AV' software. Furthermore, commands like /og_claim and /og_config are designed to reveal API keys and Agent IDs, posing a risk of credential exposure through the agent's output.