Pentest with Burp Mcp

• Analyzed: May 3, 2026, 2:46 PM
• Findings: 0
• Version: 1.0.1
• Hash: 70f235874c08e1f74285e4f0febcee3a910579cd296b6ac623ee6ab3660d2eca
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: pentest-with-bp Version: 1.0.1 The skill bundle defines an automated 'PenTest Engineer' role designed to perform vulnerability discovery and exploitation using Burp Suite, Chrome DevTools, and JADX MCPs. While the instructions in SKILL.md are consistent with the stated purpose of security testing, they include high-risk directives for automated exploitation, WAF rule bypassing, and JS reverse engineering. The bundle is classified as suspicious due to these high-risk offensive capabilities and the potential for automated interaction with external targets, although no clear evidence of intentional malice against the user or host environment (such as credential theft or unauthorized exfiltration) was found.