Seed Phrase Recovery Planner

• Analyzed: May 7, 2026, 5:41 AM
• Findings: 0
• Version: 1.0.0
• Hash: 9fb9c7cee2ea599ebbab79db145e8551344f29e1cd18e0b339d4789892e26849
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: seed-phrase-recovery-planner Version: 1.0.0 The Seed Phrase Recovery Planner is a purely descriptive, educational skill with no executable code. The bundle (SKILL.md, skill.json, ACCEPTANCE.md) explicitly prohibits the collection of sensitive data, includes strong safety boundaries, and sets 'no_code_execution' to true. There are no indicators of data exfiltration, malicious instructions, or technical vulnerabilities.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Note

What this means

Users may discuss sensitive recovery planning details, but they should never paste or reveal the actual seed phrase.

Why it was flagged

The skill operates in a wallet/seed-phrase context, which is sensitive, but it explicitly sets a boundary that the actual seed phrase must not be provided or processed.

Skill content

Store, receive, or process the user's actual seed phrase — it must never be shared.

Recommendation

Use the skill only for planning and hypothetical discussion; do not provide seed words, private keys, wallet passwords, exact hiding places, or other secrets.