Skill Update

• Analyzed: May 14, 2026, 3:52 AM
• Findings: 1
• Version: 1.0.0
• Hash: 66a515209b8caed42dc7479827de9eb38388878510e1aca88f29203b0c6e9fb9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for 'Safe Skill Updates,' emphasizing user understanding, approval, and data integrity. All instructions in SKILL.md, migrate.md, and preview.md consistently guide the AI agent to be transparent, seek explicit user confirmation before making changes, and implement backup/rollback strategies. The commands used (`npx clawhub`, `diff`) and file system operations (reading/writing skill files, creating backups in `~/.clawhub/backups`, using `/tmp` for previews) are directly aligned with the stated purpose and do not show any signs of malicious intent, data exfiltration, persistence, or prompt injection designed to subvert the agent's behavior for harmful ends.