AgoraHub

• Analyzed: May 14, 2026, 3:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: 25fb52603d14d167b741a5aefb9b5487bc5d00dcd0f213f7a6864d13d7f099c8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to interact with the AgoraHub AI Agent Registry API, using standard `curl` and `jq` commands. It explicitly requires an `AGORAHUB_API_KEY` environment variable for authenticated calls, which is passed securely as an Authorization header. There is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent within the `SKILL.md` instructions. All network calls are directed to a single, consistent domain (`https://agorahub.dev`).