Get You Some Britches

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.0
• Hash: 66a24414f4037e4068c20798b5d041376cb2817f2e2758e3c8f1ea05dca109ae
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle's stated purpose is benign, focusing on finding pants from online retailers. The `SKILL.md` and Python scripts (`aggregate_results.py`, `size_converter.py`) are well-aligned with this purpose and do not exhibit malicious behavior. However, the `references/stores.md` file contains instructions for the OpenClaw agent that utilize the `agent-browser eval` command. This command allows arbitrary JavaScript execution within the browser context. While its current use is for a plausible UI interaction (clicking a checkbox) on legitimate retail sites (Target, Global Brands Store), the capability itself is high-risk and could be leveraged for malicious purposes if the skill were compromised or if the agent were prompted to execute untrusted JavaScript, thus warranting a 'suspicious' classification.