Openpond Cli

• Analyzed: May 12, 2026, 3:55 AM
• Findings: 1
• Version: 0.1.1
• Hash: 6a1f2939d79b1d6d1d4a5de225a8d2865e26ac04b5218f3e08cbbeb2ba802f3b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides instructions for using the OpenPond CLI, including installation via `npm`, authentication, repository management, deployment watching, and tool execution. All commands and descriptions align with the stated purpose of managing OpenPond applications. There is no evidence of prompt injection against the OpenClaw agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. While passing API keys on the command line (`openpond login --api-key`) can be a security vulnerability, it is a common CLI pattern and does not indicate malicious intent from the skill itself.