AOI Prompt Injection Sentinel

• Analyzed: May 12, 2026, 4:04 AM
• Findings: 1
• Version: 0.1.2
• Hash: 0eaa7f3c000d4384e7c1caea39ff673f078a06b2421339394a477e6384501ebc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'aoi-prompt-injection-sentinel' is a self-contained Node.js script designed to detect prompt injection patterns in input text. The `SKILL.md` explicitly states it has 'No webhook, no outbound calls, no auto-posting. No secret handling,' and its instructions are benign. The `skill.js` code uses only standard Node.js modules (like `crypto` for hashing) and contains no external dependencies, network calls, file system writes, or `eval`/`exec` of untrusted input. Its regular expressions are used solely for pattern matching within the provided text, not for executing commands. There is no evidence of malicious intent, data exfiltration, persistence, or any other harmful behavior.