Screen Monitor

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.1
• Hash: 95e01dff63cfb581dc06b03b18bb1f4ee2674d5a2dd647cbf7eb325a2669f375
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for screen sharing and analysis by an AI agent. It uses a local Node.js server (`references/backend-endpoint.js`) on port 18795 to receive screen frames via WebRTC from `web/screen-share.html`, saving them to `/tmp/clawdbot-screen-latest.png`. The `references/screen-analyze.sh` script then instructs the local `clawdbot agent` to analyze this image. While the WebRTC portal is accessible via LAN IP (`references/get-share-url.sh`) and declared as 'remote_access' in `manifest.json`, the user must explicitly initiate screen sharing, and all captured data is processed locally by the agent, not exfiltrated to external unauthorized endpoints. There is no evidence of malicious intent, unauthorized execution, or prompt injection attempts to subvert the agent's core directives.