Open Construction Estimate

• Analyzed: May 12, 2026, 3:35 AM
• Findings: 1
• Version: 2.0.0
• Hash: d285d3819a7eaa4294f20fda5c7f339e07e5d2405c7beb71e0236be00b124243
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill bundle is classified as benign. The code in SKILL.md implements construction cost estimation, work item matching, and database management using standard libraries like pandas, scikit-learn, and sentence-transformers. The requested 'filesystem' permission in claw.json is justified by reading/writing local CSV databases and exporting Excel reports. The 'network' permission is justified by the sentence-transformer model download and the skill's description mentioning access to online pricing databases. The instructions.md and SKILL.md contain no evidence of prompt injection attempts or malicious intent, such as data exfiltration, unauthorized execution, or persistence mechanisms.