CartPilot

• Verdict: Advisory
• Analyzed: Apr 2, 2026, 10:11 AM
• Findings: 0
• Version: 1.0.0
• Hash: 14c1bfb66e506fd3b37bfe5eaec9387afd12cef5683b2ebb4abeec57553659e3
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: cartpilot Version: 1.0.0 The CartPilot skill bundle is a well-documented set of instructions and metadata designed to help an AI agent optimize shopping checkout paths on platforms like Taobao and JD. The SKILL.md file contains clear logic for calculating discounts and delivery trade-offs while explicitly defining safety boundaries that prohibit automated logins or purchases. The included scripts/publish.sh is a standard utility for registry management with no signs of malicious execution or data exfiltration.