channel is an AI agent skill, created by alphafactor and published at openclaw/skills. ClawSecure audited channel across 5 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 22 findings concentrate in Data Exfiltration, Command Injection and Unauthorized Tool Use, including Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in.... None were rated high or critical severity.
Is channel safe?
ClawSecure audited channel and assigned a security score of 0/100 (High Risk), identifying 22 findings across Data Exfiltration and Command Injection. Review the findings below before installing.
What did ClawSecure find in channel?
ClawSecure identified 22 findings in channel, concentrated in Data Exfiltration, Command Injection and Unauthorized Tool Use. The most severe include Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in....
How was channel audited?
ClawSecure ran channel through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 5 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned channel a security score of 0/100, placing it in the High Risk range. This is driven by 22 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for channel
ClawSecure detected 22 security findings in channel, spanning Data Exfiltration, Command Injection, Unauthorized Tool Use and Policy Violation.
- medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/f2d6b5205719930b/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/f2d6b5205719930b/scripts/channel.py. - medium · Variable $title (tainted at line 3: `title=$(head -1 "$file")`) flows.... Command Injection finding detected in
SKILL.md:220. - medium · Variable $CONTENT (tainted at line 5: `CONTENT=$(cat template.txt)`).... Command Injection finding detected in
SKILL.md:234. - medium · Code block in references/wechat_api.md at line 278 contains potentially.... Data Exfiltration finding detected in
references/wechat_api.md:278. - medium · Code block in references/wechat_api.md at line 292 contains potentially.... Data Exfiltration finding detected in
references/wechat_api.md:292. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/channel.py:56. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/channel.py:57. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/channel.py:114. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/channel.py:119. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/channel.py:287. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/channel.py:291.
Showing the 12 highest-severity of 22 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for channel
Audit external network connections
Harden command execution
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on March 12, 2026. channel is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.