zeroclaw

This skill is coherent with its stated purpose as an autonomous agent platform, and the install sources appear same-org rather than covert third-party infrastructure. The main risk is not hidden malware but the platform’s broad autonomous footprint: multi-channel ingress, outbound messaging/webhooks, local tool execution, and examples that relax approval controls. Overall this is high-risk operationally but not clearly malicious.