Arbiter

• Analyzed: May 12, 2026, 3:21 AM
• Findings: 1
• Version: 0.1.0
• Hash: fc7bbf93306a032a79ed6e409f91464d93bfbf2846414a603a42c466de1351df
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Arbiter skill is designed for asynchronous human review of decisions, primarily interacting with a local file-based queue located at `~/.arbiter/queue/`. All file system operations (read, write, directory creation) are strictly confined to this dedicated directory. The skill reads standard OpenClaw environment variables (`CLAWDBOT_AGENT`, `CLAWDBOT_SESSION`) for identification but does not access other sensitive data or make external network calls. The `SKILL.md` instructions are clear, focused on the skill's purpose, and do not contain any prompt injection attempts to subvert agent behavior. The dependencies (`gray-matter`, `nanoid`) are benign and standard for the functionality provided.