Mini Coder Max

PassAudited by VirusTotal on May 3, 2026.

Overview

Type: OpenClaw Skill Name: eric-mini-coder-max Version: 11.0.0 The skill bundle 'eric-mini-coder-max' is a well-structured set of instructions for an AI coding agent. It emphasizes a disciplined workflow including planning, research, implementation, and a mandatory quality assurance phase that explicitly checks for security vulnerabilities like SQL injection and hardcoded credentials (SKILL.md). No malicious code, data exfiltration, or prompt injection attacks were identified.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may make substantial codebase changes during a coding task.

Why it was flagged

The skill is intended to implement code and may drive broad multi-file changes if the host agent has editing tools. This is coherent with a coding skill, but users should review the scope and diff before accepting changes.

Skill content
It adapts its depth of effort to task complexity—from simple single-file changes to enterprise-scale multi-module systems
Recommendation

Use it in a version-controlled workspace and review proposed plans, file changes, and tests before merging or deploying.

What this means

Some debugging details could be sent to external search or fetch providers during research.

Why it was flagged

The instructions disclose external web research. Searching exact error messages can be useful, but error text may contain project paths, internal names, or secrets if not redacted.

Skill content
Use web search and fetch tools to find information ... For problem solving: search exact error message first
Recommendation

Review or redact error messages, stack traces, code snippets, and configuration details before allowing external searches.

What this means

Users have less external context for who maintains the skill or where to verify it.

Why it was flagged

The skill has limited provenance information. Because it is instruction-only with no install script or code files, this is a notice rather than a material concern.

Skill content
Source: unknown
Homepage: none
Recommendation

Read the skill instructions before enabling it and prefer trusted publishers for skills that will edit important code.