Garden
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: garden Version: 1.1.6 The OpenClaw Garden skill is classified as benign. All analyzed files, including the critical `SKILL.md` and `setup.md` (which serve as prompt injection surfaces), consistently describe a local-only data management skill. The skill's primary functions involve creating directories (`mkdir -p ~/garden` in `memory-template.md`) and managing markdown files within the `~/garden/` directory. The `SKILL.md` explicitly states 'No external APIs or network calls', 'No telemetry, analytics, or data collection', and 'Does NOT... Make any network requests', which is consistent with the code and instructions. There is no evidence of data exfiltration, remote execution, persistence mechanisms, or obfuscation. The shell commands for directory and file creation are fixed and target the expected local skill directory, which is a necessary and non-malicious capability for a local data management skill.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create or update garden records on your device, and with your explicit yes may add an activation preference to broader memory.
The skill asks the agent to create and update local files, and may update a broader memory file with consent. This is disclosed and aligned with garden tracking, but it is still local data mutation the user should notice.
What this skill writes: - Files in `~/garden/` ... - Optionally: one line in user's workspace MEMORY.md ... only after asking and receiving explicit "yes"
Install only if you want local garden records maintained; confirm exactly what should be saved, and decline the optional MEMORY.md integration if you do not want future automatic activation.
Garden details you share may be reused in future garden conversations, improving advice but also creating a persistent local record.
The skill intentionally persists garden context and reloads it for future use. That is core to the purpose, but persistent context can shape later advice and may include location, climate, plant, or schedule details.
Agent maintains structured memory across seasons. ... Memory file = current focus, always loaded first
Review ~/garden periodically, avoid saving details you consider private, and ask the agent to pause or stop collecting garden details if you no longer want persistence.