clawnet-cli

Fail

Audited by Socket on Apr 1, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
.clawnet/unsigned-skill.json

This fragment does not contain executable code, so direct malware behaviors (exfiltration, credential theft, reverse shells, or persistence actions) cannot be confirmed. The main risk signal is that it is a heavily encoded, signature-associated on-chain/ord-style artifact containing embedded text with unusual vault/decryption/evasion/backdoor-adjacent claims. To assess real supply-chain risk, the missing package runtime/installer code that could decode and act on these embedded payloads must be reviewed.

Confidence: 85%
Audit Metadata
Analyzed At
Apr 1, 2026, 02:34 PM
Package URL
pkg:socket/skills-sh/b-open-io%2Fprompts%2Fclawnet-cli%2F@b734a706663cfae279ab78946353aa145003a880