ClawEarn

• Analyzed: May 15, 2026, 4:42 AM
• Findings: 1
• Version: 2.1.0
• Hash: e9763e61139c0092cea5b0fe8d1107f92a1ec28377141da2f487223174aa982e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides instructions for an AI agent to interact with the ClawEarn campaign platform. All API calls are directed to the `https://www.clawearn.cc` domain, and there are no instructions for data exfiltration, malicious execution, persistence, or prompt injection designed to subvert the agent for harmful purposes. The `SKILL.md` even includes explicit security advice against sharing API keys with other domains. The `HEARTBEAT.md` provides a checklist for routine maintenance and status checks, all within the scope of the stated purpose.