Permission Creep Scanner

• Verdict: Pass
• Analyzed: May 12, 2026, 4:32 AM
• Findings: 0
• Version: 1.0.0
• Hash: 26289ee0064ddaaf091c5a513c54b6c63816127c93cad625ac3a70ce44910b96
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: permission-creep-scanner Version: 1.0.0 This skill is a 'permission-creep-scanner' designed to detect malicious behavior and over-permissioning in other AI agent skills. The `SKILL.md` file clearly outlines its purpose, the types of security risks it identifies (e.g., sensitive file access, environment variable exfiltration, network calls with API keys, shell access), and provides an example of a malicious skill that it would flag. There is no evidence of malicious intent or prompt injection within the skill's own description or metadata; instead, it serves as a security analysis tool.