China Industrial Machinery Factory

• Analyzed: May 11, 2026, 6:57 AM
• Findings: 0
• Version: 1.0.0
• Hash: 0fc226ab9aa224fa4bf2005c934cbb0b814a274a8aa28c410228bb2318d303e4
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: china-industrial-machinery-factory Version: 1.0.0 The skill is a purely informational tool providing data on the Chinese industrial machinery industry. The implementation in `run.py` is limited to safe, read-only operations on the local `data.json` file, and the `SKILL.md` contains no prompt injection attempts or instructions to perform unauthorized actions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

You have limited information about who maintains the skill or where its data/code originates.

Why it was flagged

The bundled code and data have limited external provenance information. This is not suspicious by itself because the artifacts show no install scripts, dependencies, network calls, or privileged behavior, but users have less publisher context.

Skill content

Source: unknown; Homepage: none

Recommendation

Review the visible run.py and data.json before relying on it, and prefer a verified source or homepage if provenance matters.