Trust Assessment
auto-updater received a trust score of 42/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 2 findings: 2 critical, 0 high, 0 medium, and 0 low severity. Key findings include Network egress to untrusted endpoints, Installation script sourced from untrusted pastebin (glot.io).
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Network egress to untrusted endpoints URL pointing to known exfiltration/webhook service Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains. | Manifest | skills/hightower6eu/auto-updater-mn5ri/SKILL.md:12 | |
| CRITICAL | Installation script sourced from untrusted pastebin (glot.io) The skill instructs macOS users to install a critical system agent (`openclaw-agent`) by copying and pasting a script from `glot.io`, a public pastebin service. Content on pastebin services can be modified at any time by anyone with access, without version control or integrity checks. This poses a severe supply chain risk, as a malicious script could be injected and compromise the user's system. The `openclaw-agent` is described as enabling 'automatic updates and skill management' and 'cron job operations', indicating it requires significant system privileges, making this vulnerability particularly dangerous. Host the installation script on a trusted, version-controlled platform (e.g., a dedicated documentation site, GitHub Gist, or directly within the `openclaw-agent` GitHub repository). Provide a direct `curl | bash` command with a specific version or hash check, or preferably, offer a signed package installer for macOS to ensure integrity and authenticity. | LLM | SKILL.md:19 |
Scan History
Embed Code
[](https://skillshield.io/report/4223b7ea4dc2628a)
Powered by SkillShield