Database Engineering Mastery

• Analyzed: May 12, 2026, 4:10 AM
• Findings: 1
• Version: 1.0.0
• Hash: bfe8dc37b5e12f505cb150780e60f8fabce3f864b90c13ddd76527cec513080d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the inclusion of several powerful shell commands (`pg_dump`, `pg_basebackup`, `du`, `find ... -delete`) and disruptive SQL commands (`pg_terminate_backend`, `VACUUM FULL`) within `SKILL.md`. While these commands are presented in the context of legitimate database administration, backup, and emergency operations, they represent 'risky capabilities' that interact with the underlying operating system and database. If the OpenClaw agent's execution environment or its handling of user input is vulnerable to prompt or command injection, these commands could be misused by a malicious actor, despite the skill itself advocating for security best practices like SQL injection prevention.