Wikclawpedia Archive Access

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: wikclawpedia Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'wikclawpedia' is designed to interact with a remote wiki API for searching, retrieving, and submitting information. The `index.js` code implements these functions using standard `fetch` calls to a single, hardcoded external domain (https://wikclawpedia.com/api). Input validation is present for all API calls. The `SKILL.md` and `README.md` documentation clearly describe the skill's purpose and usage, without any evidence of prompt injection attempts to subvert agent behavior or access unauthorized resources. The skill explicitly states 'authentication: none' and 'All APIs are public with rate limiting per IP'. There are no signs of data exfiltration, malicious execution, persistence, or obfuscation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent or user can submit information to Wikclawpedia, which may later be reviewed and published.

Why it was flagged

The submit function sends caller-provided intel to the external Wikclawpedia API. This is disclosed and aligned with the skill purpose, but it is still an external write action.

Skill content
const response = await fetch(url, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(intel) });
Recommendation

Review submit payloads before use and avoid sending private, confidential, or unverified information.

What this means

If an agent over-trusts wiki text, inaccurate or manipulated entries could influence its answers or decisions.

Why it was flagged

The skill is designed to retrieve external wiki content for use as agent context and reference material. That is expected for a knowledge skill, but retrieved content should not be treated as trusted instructions.

Skill content
const context = await wikclawpedia.search("previous similar project");

// Get reference material
const docs = await wikclawpedia.get("OpenClaw", "platforms");
Recommendation

Treat retrieved wiki entries as external reference material, not as instructions, and cross-check important claims before acting on them.