Skill Recommender

• Analyzed: May 11, 2026, 1:01 PM
• Findings: 1
• Version: 0.1.1
• Hash: adb5c68e3aeeb5967199caad1654940bd6cf02d9e2a447f39b4a7894dbf28423
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a utility for analyzing and recommending OpenClaw skills based on local metadata. It implements robust security practices, such as path validation in `scripts/recommend_skills.js` to prevent directory traversal attacks. The scripts perform keyword-based scoring and clustering without any network connectivity, external data exfiltration, or use of dangerous execution functions like eval or child_process.