skills/alphaonedev/openclaw-graph/goplaces/Socket

goplaces

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The visible artifact is not a functional Maps skill; it mainly instructs installation of an unseen third-party skill via the official ClawHub ecosystem. Because this is a transitive skill-install pattern with unverified bundle provenance for `goplaces`, risk is medium even though the stub itself shows no credential theft or exfiltration.

Confidence: 88%Severity: 66%

Audit Metadata

Analyzed At

Mar 14, 2026, 11:07 AM

Package URL

pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Fgoplaces%2F@063da20800e137197a11c2cce74f5c3db14e9c93