VoiceMonkey

• Analyzed: May 13, 2026, 3:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7d00b93df77231c67cc22d9a07dba8156a90c387f3cee494501830c4e63e57cd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for VoiceMonkey is benign. The `SKILL.md` file provides clear instructions and `curl` examples for interacting with the VoiceMonkey API, which is its stated purpose. It requires a `VOICEMONKEY_TOKEN` for authentication, which is standard for API-based skills. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts against the agent within the skill's definition. While the API allows displaying arbitrary URLs for images, videos, or websites, the skill itself uses `example.com` placeholders and does not instruct the agent to use malicious URLs or perform any harmful actions.