Data Lineage Tracker

• Analyzed: May 12, 2026, 3:35 AM
• Findings: 1
• Version: 2.1.0
• Hash: 9ca24438a629b6d181c9b89a4f1ff6ce6938f0c988f819a2c08a890a2ae0f569
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's core Python logic in SKILL.md is benign, implementing an in-memory data lineage tracker without file system, network, or shell operations. However, the claw.json manifest declares 'filesystem' permissions which are not utilized by the provided Python code. This over-permission creates a potential vulnerability, as an AI agent, if prompted, could attempt file system operations despite the skill's current implementation not requiring it. There is no evidence of intentional malicious behavior like data exfiltration or persistence.