Autoresearch

• Analyzed: May 9, 2026, 8:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7268c9a77390d849e66b2695b4d6a2ae3e63ad4e9a3ecc8cbaabac5e624196ba
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to programmatically modify other OpenClaw skills by editing their 'SKILL.md' files in the '~/.openclaw/skills/' directory. It uses a Python helper script ('scripts/run_eval.py') to read, write, and manage snapshots of these files during an iterative 'mutation-testing' loop. While the stated intent is optimization (inspired by Karpathy's autoresearch), the capability to overwrite the instructions of other skills constitutes a high-risk behavior that could be used for persistent prompt injection or lateral modification of agent behavior across the system.