claw-negotiateAPOA-constrained SAFE negotiation on OpenClaw. Two OpenClaws negotiate within user-approved bounds, stream offers in Telegram, and finalize with human-approv...
Install via ClawdBot CLI:
clawdbot install juanfiguera/claw-negotiateGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
post → https://www.ycombinator.com/documentsAccesses system directories or attempts privilege escalation
/proc/Calls external URL not in known-safe list
https://github.com/agenticpoa/claw-negotiateUses known external API (expected, informational)
raw.githubusercontent.comUsage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 4, 2026
AI Analysis
The skill's external API usage (github.com, raw.githubusercontent.com, ycombinator.com) is consistent with its stated purpose of SAFE negotiation and document retrieval. The /proc/ access signal is likely a false positive from environment checks. No evidence of hidden instructions, credential harvesting, or obfuscation was found.
Audited May 10, 2026 · audit v1.0
Control remote Windows machines via SSH. Use when executing commands on Windows, checking GPU status (nvidia-smi), running scripts, or managing remote Windows systems. Triggers on "run on Windows", "execute on remote", "check GPU", "nvidia-smi", "远程执行", "Windows 命令".
Perform reverse lookup of gTLD domains hosted on a specified nameserver with optional filters by TLD and domain prefix length.
Connect to remote desktops via RDP, VNC, and SSH X11 with secure tunneling and troubleshooting.
Essential curl commands for HTTP requests, API testing, and file transfers.
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
Monitor web pages for content changes and get alerts. Track URLs, detect updates, view diffs. Use when asked to watch a website, track changes on a page, mon...