skill-guard w Snyk Agent Scan

• Analyzed: May 11, 2026, 5:46 AM
• Findings: 1
• Version: 1.0.3
• Hash: 764382b0baca84bd751d39737589d7a3e34062e3976e6b707b4d405c0a5742ec
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill-guard bundle is a security utility designed to protect OpenClaw agents by scanning other skills for vulnerabilities before installation. The primary component, scripts/safe-install.sh, implements a secure workflow by downloading skills to a temporary staging directory, scanning them using the legitimate Snyk Agent Scan tool (via uvx), and only moving them to the active workspace if no threats are detected. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic aligns perfectly with its stated purpose of enhancing agent security.