Schedule

• Analyzed: May 15, 2026, 3:55 AM
• Findings: 1
• Version: 1.0.2
• Hash: 2b7e848bb392b4d571c039e3a44f6a00ba719d2c54e353574207bd7cfec95b1b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'schedule' is designed as a benign utility for managing recurring or one-time tasks. The `SKILL.md` explicitly states that the skill 'only handles WHEN, not WHAT', meaning the user defines the task content and grants necessary permissions, not the skill itself. It also explicitly disclaims modifying system crontab/launchd and executing jobs without user-defined instructions, which are strong indicators against malicious intent or persistence mechanisms. All data storage is local to `~/schedule/`, and no evidence of data exfiltration, malicious execution, or prompt injection attempts against the agent were found within the skill's own instructions or data formats.