Is janhcla/clawdbot-documentation-expert safe?

https://github.com/openclaw/skills/tree/main/skills/janhcla/clawdbot-documentation-expert

93
SAFE

This skill is a legitimate documentation helper for Clawdbot that provides navigation, search, and caching functionality for documentation content. The shell scripts are focused on documentation processing and appear safe.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

INFO Shell Scripts Present -15

The skill contains multiple shell scripts (sitemap.sh, search.sh, cache.sh, etc.) for documentation processing. All scripts appear legitimate and focused on fetching and managing Clawdbot documentation.

LOW Network Requests to External Documentation -10

The skill makes HTTP requests to docs.clawd.bot to fetch documentation content. This is expected behavior for a documentation helper but involves external network access.