Apps

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: apps Version: 1.0.0 The skill bundle is benign. Its primary function is to manage app recommendations and user preferences by reading from and writing to local markdown files within a dedicated `~/apps/` directory. The only shell command instructed is `mkdir -p ~/apps` for initial setup, which is a safe and necessary operation. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent for harmful purposes. The `SKILL.md` explicitly disclaims high-risk actions like installing apps or accessing accounts.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your app preferences and history may persist across sessions and affect future suggestions.

Why it was flagged

The skill uses persistent local files to store preferences, dislikes, favorites, tried apps, and wishlist items, then reuses that information for later recommendations.

Skill content
Memory lives in `~/apps/`... Before recommending, read `~/apps/memory.md`... Update Memory Proactively
Recommendation

Review or edit the files in ~/apps/ if recommendations seem wrong, and avoid storing sensitive personal details there unless you are comfortable keeping them locally.