Host Security Audit

• Analyzed: Apr 30, 2026, 4:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9d98d7119b47402949ae006e424bf774740e1af2a486c104d26d5561e96763d1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle 'host-security-audit' is benign. The `SKILL.md` provides clear instructions for the AI agent to execute a security audit script and report its findings. The `scripts/security-audit.sh` script performs a comprehensive set of system and OpenClaw-specific security checks (e.g., firewall, disk encryption, open ports, API key exposure, suspicious processes). All commands executed are standard system utilities for information gathering, and the script reports findings without exfiltrating sensitive data, installing backdoors, or executing arbitrary malicious code. The network call to `npm view` is a legitimate check for software updates.