Resilient Coding Agent

• Verdict: Pass
• Analyzed: May 12, 2026, 4:08 AM
• Findings: 0
• Version: 0.5.0
• Hash: c32a21a7466b55c7333ee3d9768042065992c48fbb2270ea73349b97330db6cd
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: resilient-coding-agent Version: 0.5.0 The skill bundle appears benign and well-intentioned. It focuses on running long-running coding agents within `tmux` sessions for resilience, explicitly addressing security concerns like prompt injection prevention (by writing prompts to files and using `$(cat)` within double quotes) and secure temporary directory creation (`mktemp -d`, `chmod 700`). It also warns about sensitive output in logs and scrollback. There is no evidence of intentional data exfiltration, backdoor installation, unauthorized remote control, or prompt injection attempts against the OpenClaw agent itself. Any potential vulnerabilities (e.g., `cd <project-dir>` or the orchestrator's `write` tool behavior) are described as relying on external validation or implementation, not as malicious intent within the skill's own logic.