skills/openclaw/skills/desktop-control/Socket

desktop-control

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s actual behavior is not desktop control but a broad third-party AI gateway with email/SMS actions and search/scraping. It does not install local malware, but it centralizes sensitive data and credentials through an intermediary API and grants capabilities that exceed the stated purpose.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Mar 27, 2026, 08:19 AM

Package URL

pkg:socket/skills-sh/openclaw%2Fskills%2Fdesktop-control%2F@7b60225864a2a51e0725d0c4c0d21073fd6311e2