Agentic Engineering

• Analyzed: May 12, 2026, 4:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: 83bcbfd6965588208ef7cd090130cfe0930f67cfe7f4e012a645de994ecb05cd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle consists entirely of markdown documentation providing guidance on workflow optimization for users working with AI coding agents. The `SKILL.md` explicitly states that this skill 'NEVER accesses external systems' and 'does NOT execute code autonomously' or 'make network requests'. While the documentation mentions various CLIs (e.g., `git`, `vercel`, `psql`) and commands, these are presented as tools for the *user's other AI agents* or for the *user* themselves, not as instructions for the OpenClaw agent executing this skill. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection targeting the OpenClaw agent itself.