Social Intelligence

• Analyzed: May 12, 2026, 3:54 AM
• Findings: 1
• Version: 1.1.1
• Hash: 97842d3b43365f4e5c730801ee241cac923281ab3b0b49f19d16854d24be1e3d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to interface with the Xpoz social intelligence platform. It declares its dependency on the `mcporter` binary (installed via npm) and requires network access to `mcp.xpoz.ai`, which is the stated backend for the service. All instructions in SKILL.md are clear, directly related to the skill's purpose, and use standard OpenClaw and npm commands. There is no evidence of prompt injection, data exfiltration to undeclared endpoints, malicious execution, persistence mechanisms, or obfuscation within the provided files. The skill appears to be a legitimate client for a third-party service.