explorer is an AI agent skill, created by alphafactor and published at openclaw/skills. ClawSecure audited explorer across 4 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 75/100 (Medium Risk). The 6 findings concentrate in Data Exfiltration, Unauthorized Tool Use and Policy Violation, including Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in.... None were rated high or critical severity.
Is explorer safe?
ClawSecure audited explorer and assigned a security score of 75/100 (Medium Risk), identifying 6 findings across Data Exfiltration and Unauthorized Tool Use. Review the findings below before installing.
What did ClawSecure find in explorer?
ClawSecure identified 6 findings in explorer, concentrated in Data Exfiltration, Unauthorized Tool Use and Policy Violation. The most severe include Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in....
How was explorer audited?
ClawSecure ran explorer through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 4 files from openclaw/skills.
What does a score of 75 mean?
ClawSecure assigned explorer a security score of 75/100, placing it in the Medium Risk range. This reflects 6 findings led by Data Exfiltration that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for explorer
ClawSecure detected 6 security findings in explorer, spanning Data Exfiltration, Unauthorized Tool Use, Policy Violation and Permissions Manifest.
- medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/2bbcba4abf23b916/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/2bbcba4abf23b916/scripts/github_projects.py. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/github_projects.py:78. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/github_projects.py:80. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for explorer
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on March 12, 2026. explorer is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.