SAFE-Fuzzer

• Analyzed: Mar 29, 2026, 11:16 PM
• Findings: 1
• Version: 1.0.0
• Hash: d01af551c36e79f287e42738bf62bdf1111d88418a6f666429cdce6c0178e4bc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The safe-fuzzer skill is a security testing tool designed to perform gray-box fuzzing on other OpenClaw skills by spawning worker subagents and monitoring their behavior. It employs high-risk capabilities, including shell execution, network egress probing, and sub-session management (SKILL.md), which are plausibly necessary for its stated purpose but inherently risky. The skill includes robust safety gates, such as mandatory sandboxing and the use of synthetic 'honeypot' secrets (balanced.json), and explicitly prohibits accessing real host environment variables or sensitive OpenClaw configuration files.