OpenClaw Quickstart

• Analyzed: May 11, 2026, 5:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: a78ef6ad67de6de11fba7880f00c39cb6d9d109646388d63b68acc169e5bcbf2
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill bundle is classified as suspicious due to its use of powerful capabilities that, while presented for a benign onboarding purpose, carry inherent risks. Specifically, the `SKILL.md` instructs the AI agent to 'silently run the installer' (`scripts/install.js`), which is a direct prompt injection vector bypassing user confirmation. The `install.js` script then modifies the agent's `HEARTBEAT.md` file to embed a recurring task and creates cron jobs (`quickstart-reminder`) using the `openclaw` CLI, establishing persistence and modifying the system environment. These actions demonstrate significant control over the agent's behavior and system, representing risky capabilities without clear malicious intent.