client-flow

• Analyzed: May 12, 2026, 4:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 465ed32bb9939b8c60e40c31082ba4aeb8740ac70fda8cc69d80df2abbde8895
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'client-flow' is classified as benign. The skill's instructions in SKILL.md describe a comprehensive client onboarding and project management workflow, involving legitimate operations such as creating local/cloud folders, generating documents, sending emails, scheduling meetings, and managing tasks via various external services (Google Drive, Dropbox, Google Calendar, Todoist, etc.). There is no evidence of intentional malicious behavior, data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts designed to harm the agent or user. While the skill interacts with the local filesystem and external APIs, these actions are directly aligned with its stated purpose, and any potential vulnerabilities (e.g., path traversal due to unsanitized input) would be a flaw in the agent's execution environment rather than malicious intent within the skill itself.