Update Signature Verifier

• Verdict: Pass
• Analyzed: May 12, 2026, 4:33 AM
• Findings: 0
• Version: 1.0.0
• Hash: c6ad0210fc45a043c04d750e5b84ae493df73bcd81b98d653b68a2c181348962
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: update-signature-verifier Version: 1.0.0 The skill's stated purpose is to verify the cryptographic integrity of skill updates, a legitimate security function. The `SKILL.md` clearly describes this purpose, its checks, and usage, without any evidence of prompt injection attempts against the agent. While it requires `curl` and `python3`, these are standard binaries and their use is consistent with the stated security auditing purpose. There are no indicators of malicious intent such as data exfiltration, unauthorized execution, persistence, or obfuscation within the provided files.