Moodle Web Services Skill

• Analyzed: May 12, 2026, 4:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 76f245d1d951cb551330a89896996e697e573e18743df8707bb18b49d4aa5878
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's stated purpose is legitimate Moodle 4.x integration via Web Services. The `SKILL.md` instructions explicitly advise against storing sensitive tokens in the chat and recommend secure storage methods like environment variables or a dedicated secrets file within the OpenClaw workspace. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection with harmful intent. All instructions and metadata align with a standard, security-conscious integration skill.