Frontend Builder

• Analyzed: May 12, 2026, 4:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: c3a9b84d9b92c80c3808461331c2293312ee0a34067e7a309868a2703f7ea385
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to orchestrate other OpenClaw skills for generating React UI components. The `SKILL.md` file provides detailed instructions for the AI agent, including legitimate `npx` commands for installing `clawhub` and `shadcn` dependencies, which are standard for this type of development task. There is no evidence of malicious intent, such as data exfiltration, unauthorized command execution, persistence, or deceptive prompt injection. The `SKILL.md` even includes explicit 'Guardrails' to ensure transparency and prevent the agent from making false claims or generating code with undeclared dependencies, which is a positive security indicator.