Code Audit

• Analyzed: May 11, 2026, 6:04 AM
• Findings: 1
• Version: 1.2.0
• Hash: c6cdb358d39ee861cb1a8b2bf5efb27bc30e78155bf4f157b17fea5a5cbedd2f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a comprehensive security and quality auditing tool designed for the OpenClaw environment. The core script, scripts/audit_scanner.py, implements extensive diagnostic checks for hardcoded secrets, dangerous shell commands, and system-level anomalies such as unsigned binaries (via codesign), unauthorized network listeners (via lsof), and suspicious SUID files. The SKILL.md file includes robust safety instructions that explicitly prohibit the AI agent from making unauthorized file modifications or auto-fixing issues. No evidence of data exfiltration, malicious persistence, or harmful prompt injection was found; the tool's behavior is entirely consistent with its stated purpose.