openclaw-a2ui
What this skill does
This skill enhances the UI of OpenClaw webchat by rendering structured content (like lists, tables, and cards) using HTML. It provides templates and instructions for developers to customize the UI and
github/leoyeai - Installation Script Risk - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=openclaw-a2uiAssessments (2)
Installation Script Risk
Installation Script Risk via local-llm-review
scripts/install.ts
The install.ts script copies plugin files to the extensions directory and modifies openclaw.json to register the plugin. This could be a risk if the plugin is not trusted or if the script is not propeUninstallation Script Risk
Uninstallation Script Risk via local-llm-review
scripts/uninstall.ts
The uninstall.ts script removes plugin registration from openclaw.json and optionally deletes plugin files. If not handled carefully, this could lead to unintended removal of critical components or daBadge
Add the Anomity scan badge for openclaw-a2ui to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of openclaw-a2ui? Report an issue or request a rescan.
