Elixir Dev

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: elixir-dev Version: 1.0.0 The skill bundle provides extensive documentation and code examples for Elixir/Phoenix development tasks, including running mix commands, generating modules, understanding OTP patterns, and debugging. All content is aligned with the stated purpose of being an 'Elixir/Phoenix development companion'. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. While some documented commands like `mix ecto.drop` can be destructive, they are standard development tools and are presented as part of a normal development workflow, not with malicious intent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If these commands are run in the wrong project or environment, they could alter code formatting, update project state, or remove development or production data.

Why it was flagged

The skill's command reference includes local commands that can modify project files or delete/recreate database state. This is purpose-aligned for Phoenix/Ecto development, but should remain user-directed.

Skill content
mix format                      # Format all files
mix ecto.drop                   # Drop database
mix ecto.reset                  # Drop + create + migrate + seed
Recommendation

Confirm the target project and environment before running mutating commands, and use check/dry-run modes or backups for destructive database actions.

What this means

Users have less provenance information and may not get pre-install checks for required developer tools, though no hidden code or installer is present.

Why it was flagged

The artifact has no executable install mechanism, but its origin and local tooling requirements are not fully declared even though the instructions rely on Mix/Phoenix commands.

Skill content
Source: unknown
Homepage: none
Required binaries (all must exist): none
No install spec — this is an instruction-only skill.
Recommendation

Treat it as a documentation-style skill, verify that Elixir/Mix/Phoenix are installed in the intended environment, and review command suggestions before applying them.