Cybercentry Cyber Security Consultant
Audited by Socket on Feb 21, 2026
1 alert found:
Obfuscated FileThe fragment appears to be legitimate documentation for a paid AI security consultation service delivered via an ACP marketplace. I found no explicit malicious code, obfuscated payloads, or credential-harvesting routines in the provided text. Main risks are operational: indefinite retention of user-submitted queries (which amplifies impact of accidental secret leaks), reliance on user-side sanitization (no enforcement), unpinned npm installation instructions (standard supply-chain risk), and possible social-engineering via payment/wallet verification. Recommendations: inspect the openclaw-acp repository and package lock before npm install; add client-side sanitization/redaction tools or validation to the workflow; verify wallet addresses through independent trusted channels; avoid submitting any secrets or production identifiers in consultation queries.