Training Manager

• Analyzed: May 12, 2026, 4:09 AM
• Findings: 0
• Version: 1.0.2
• Hash: db37f1f5368ef25d33fa412d1575b6433571e573587772fadc46d0510ef5d416
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: training-manager Version: 1.0.2 The OpenClaw Training Manager skill bundle is designed with strong security considerations. The `SKILL.md` explicitly instructs the AI agent to perform prompt injection and data exfiltration checks on user input before writing to sensitive configuration files. This is reinforced by the `scripts/generate-skill.sh` and `scripts/log-training.sh` which implement robust input validation against shell metacharacters and comprehensive pattern matching for prompt injection and data exfiltration attempts (e.g., 'ignore previous instructions', 'send all files to', 'curl .*POST'). All other scripts perform benign workspace management tasks like analysis, export, scaffolding, status, and validation, without any evidence of malicious intent or risky external communication. The design prioritizes preventing misuse rather than facilitating it.