Clawhub Skill Search

• Analyzed: May 14, 2026, 6:45 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1b2d986acf0f3d52f54d9f78ef3a64aca5bf0b433925361c4c87569b34cec1c9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle serves as a directory and recommendation engine for other OpenClaw skills. However, it contains a significant security vulnerability: a hardcoded Clawhub API token (`clh_BXhiYXSolilafAFobvo269pTv60C02vOTPb1JbHPYIg`) and local system paths in the file '发布报告_20260315.md'. While the core instructions in 'SKILL.md' appear benign and aligned with the stated purpose, the inclusion of sensitive development artifacts and credentials constitutes a high-risk data leak.