久吾消息网关

• Analyzed: May 11, 2026, 7:32 AM
• Findings: 1
• Version: 1.0.1
• Hash: 9a1caaa8116a41b5a57bce2fec6c02bdbe6cc7e18d8474b640a87c2c1c9fce7e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate utility for sending internal messages via an HTTP gateway. The code in `scripts/send_message.py` uses standard Python libraries to perform POST requests to a configurable internal endpoint (defaulting to a private IP 192.168.1.213). It follows standard practices for configuration by reading environment variables from the OpenClaw workspace and contains no evidence of data exfiltration, malicious execution, or prompt injection.