Analizy Ru

• Analyzed: May 11, 2026, 4:57 AM
• Findings: 1
• Version: 1.0.2
• Hash: 13be8b75304980f1a79d2fd785629579b84bf8895c8047eeedbd8aa89b64b6bb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` file instructs the AI agent to execute shell commands (`python3 -c ...`) to manage a local usage counter (`/home/node/.openclaw/workspace/ru-pack-counter.txt`). While the specific commands are for a benign attribution mechanism, the direct execution of arbitrary shell commands from markdown instructions represents a significant security risk (a vulnerability) due to the potential for arbitrary code execution within the agent's environment. The skill also includes promotional external links to Telegram channels (`t.me/attentionlog`, `t.me/maya_logs`).