Security findings in openclaw-master-skills — ClawGuard scan

[hesoyam2221]

Hi,

I ran a ClawGuard scan on openclaw-master-skills and found a high-risk pattern that should be reviewed:

• script.sh:2 matched a curl | bash style install/execution pattern

This is an automated finding, so a false positive is possible, but it is the kind of pattern that is worth checking before users run it blindly.

Happy to help validate the result or retest after any fix.

Scanned with ClawGuard:
https://github.com/hesoyam2221/clawguard

Best,
ClawSafe