API Doc Generator

• Analyzed: May 12, 2026, 4:31 AM
• Findings: 0
• Version: 1.0.0
• Hash: eb276ca6ac5f1eb50c22424c1442c15705d364de789ccb302982b7d139fb229b
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: api-doc-generator Version: 1.0.0 The skill is designed to analyze user-provided code, but its implementation in `skill.yaml` directly applies a regular expression (`code.match()`) to the input `code` string. While the regex itself is simple, this pattern of directly processing arbitrary user input with regex without robust parsing or sanitization can introduce a Regular Expression Denial of Service (ReDoS) vulnerability, classifying it as suspicious due to a potential flaw that allows an attack.