OpenClaw Anything (efrageek fork)

• Analyzed: May 11, 2026, 4:33 AM
• Findings: 1
• Version: 1.0.3
• Hash: 01424f84c199a27ee1276d7b7c7fbc3b91847615f70a0d2d862433fa40e77a7e
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill bundle is classified as suspicious due to its explicit exposure and wrapping of high-risk capabilities of the underlying `openclaw` CLI, which include 'arbitrary shell execution', 'plugin installation from untrusted sources', 'cron creation/modification', 'browser automation against remote websites', and 'device pairing and sensor access'. While the `SKILL.md` documentation and `scripts/openclaw.sh` wrapper clearly label these actions as high-risk and implement an explicit opt-in gate (`OPENCLAW_WRAPPER_ALLOW_RISKY=1`), the inherent power of these commands (RCE, persistence, data exfiltration) presents a significant vulnerability risk if the gate is bypassed or the environment variable is set by an attacker. There is no evidence of intentional malicious behavior within the skill bundle itself, but the direct exposure of such powerful functionalities warrants a 'suspicious' classification.