Recipes

• Verdict: Pass
• Analyzed: May 12, 2026, 3:48 AM
• Findings: 0
• Version: 1.0.0
• Hash: bebeefb45c0d6bb24e7b7d849f6bf6e83937e1ba64b7d22a18d5ce7abc4d68e6
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: recipe Version: 1.0.0 The skill defines a recipe management system, requiring file system access to create a `~/recipes/` directory and store markdown files, and network access to fetch recipe content from URLs. These capabilities are directly aligned with the stated purpose. There are no instructions for data exfiltration, unauthorized execution, persistence, or prompt injection designed to subvert the agent's core function in a harmful way. The potential for SSRF/RCE exists if the agent's underlying implementation of 'fetch and extract' is vulnerable to user-provided URLs, but the skill itself does not instruct the agent to perform malicious actions, making it a vulnerability of the agent rather than malice in the skill.