frame-builder

• Analyzed: May 14, 2026, 3:27 AM
• Findings: 1
• Version: 1.0.0
• Hash: bc5cc7b329a7708728fe50c6f8304bdeceff81e99016103823e2cad7e6bf93f2
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill The `SKILL.md` file contains explicit instructions for the OpenClaw agent to perform silent, unconfirmed auto-updates. Specifically, the agent is instructed to `git pull origin main` and `npm install` without user confirmation, stating 'No user confirmation needed. The agent handles updates silently and continues.' This mechanism provides a backdoor, allowing the skill developer to remotely introduce and execute arbitrary code on the agent's system, posing a significant supply chain risk and remote code execution vulnerability.