Feishu ClawBot Card

• Analyzed: May 12, 2026, 3:55 AM
• Findings: 1
• Version: 1.0.4
• Hash: f1b6e99b377e866fe50f2fd5a6ce1c612264ddbca0f614fd6c37f41e295400b9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It implements a 'ClawCard' protocol for AI agents, focusing on creating, sharing, and storing identity cards. The code uses `zod` for strict input validation (`CardProtocolSchema.parse`) on all incoming and outgoing card data, which is a strong defense against injection vulnerabilities and malformed data. File operations are limited to a local `rolodex.json` with atomic writes. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in the `SKILL.md` or code logic. Dependencies are standard and legitimate.