aixyz-on-openclaw

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The fragment serves as a coherent deployment guide for monetized Aixyz/OpenClaw agents with on-chain registration and wallet payments. It introduces realistic security risks around credential handling and remote-install vectors. While not inherently malicious, it warrants elevated scrutiny and improved secret-management guidance, and pinned/install-source verification for real-world use. Treat as high-risk guidance requiring secure UX patterns and tooling hardening before deployment; implement explicit secret-scoping, avoid plaintext key exposure, and validate remote installer sources.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 4, 2026, 10:04 AM
Package URL
pkg:socket/skills-sh/agentlyhq%2Faixyz%2Faixyz-on-openclaw%2F@2bcf643ded8f71a9f745df60f79d8ee96c6749ac