Jasper ConfigGuard

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: 51e4ca3328e1f48dc08dd8fc1ce0855bbfc172e5ca025555625b8493aa3d0338
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'jasper-configguard' is designed for safe configuration management with automatic rollback for the OpenClaw gateway. The code (cli/configguard.js, src/index.js) uses file system operations (read/write config, manage backups in ~/.openclaw), process management (pgrep and kill -USR1 for 'openclaw-gateway' to restart), and local network calls (http.get to localhost:18789 for health checks). These actions are all directly and plausibly required for its stated purpose. There is no evidence of data exfiltration, arbitrary malicious execution, persistence mechanisms, or prompt injection attempts in SKILL.md or README.md. The capabilities, while involving system interaction, are tightly scoped to the intended function and do not indicate intentional harmful behavior.