Is aigsec/edgeone-clawscan safe?
Yes. aigsec/edgeone-clawscan is safe to install. Oathe's behavioral security audit gave the edgeone-clawscan skill by aigsec a trust score of 87/100 with 3 findings, none critical or high.
https://clawhub.ai/aigsec/edgeone-clawscan
Is aigsec/edgeone-clawscan safe to install?
edgeone-clawscan appears to be a legitimate security scanning tool that provides comprehensive OpenClaw security auditing capabilities. While it makes external service calls and accesses sensitive files, these behaviors are documented and appropriate for a security scanner.
What security issues were found in aigsec/edgeone-clawscan?
Category Scores
Findings (3)
MEDIUM External service dependency with privacy implications -20 ▶
Skill makes HTTPS requests to matrix.tencent.com/clawscan for skill reputation and CVE lookups. While documented, this creates a dependency on external Tencent infrastructure and potential privacy implications.
LOW Accesses sensitive system files during scanning -10 ▶
As part of legitimate security scanning functionality, the skill instructs the agent to access sensitive files including SSH keys, AWS credentials, and environment files.
INFO Extensive agent behavioral instructions -25 ▶
The skill provides very detailed instructions on how the agent should behave, format responses, and conduct security audits. While legitimate for its stated purpose, this level of behavioral control could potentially be misused.
Should I install aigsec/edgeone-clawscan?
Oathe's verdict for aigsec/edgeone-clawscan is SAFE with a trust score of 87/100. Recommendation: Install with caution.