Caveat verdict
openclaw-russian
russian-uncensored
Persona/style skill defining a direct Russian-speaking AI assistant mode; purely a conversational persona configuration with no code execution, credential access, or network calls — no evidence of malicious behavior.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (2)
Unicode homoglyph detected — uses lookalike characters to evade pattern matching
SKILL.md · prose
Possible hardcoded credential
SKILL.md · prose · downgraded · API_KEY = 'tboй_kлюч_cюдa
Permissions & capabilities
No declared permissions — minimal attack surface.
package_install Is this flag fair?
Thanks — recorded.