Create Educational Subagent

• Analyzed: May 3, 2026, 6:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: 3705e6564b619ef614f8b7f696bff0d726b98b78e10d82e7eda407bec43928a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle instructs the AI agent to perform automated privilege escalation by running 'openclaw devices approve --latest' in SKILL.md and approve_permissions.sh. It explicitly requests high-risk permissions such as 'operator.admin' and 'operator.talk.secrets' to resolve 'permission errors.' While the stated goal of creating an educational sub-agent is benign, the method of bypassing manual security approvals and granting administrative access to secrets is a dangerous pattern that could be exploited for unauthorized system control.