Source Scout

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: source-scout Version: 0.1.0 The source-scout skill is designed to provide factual, grounded answers by performing web searches and citing sources. It includes instructions in SKILL.md for the agent to download images using curl into a local directory (shared/artifacts) for the purpose of including visual aids in responses. The workflow is transparent, aligned with the stated purpose, and lacks any indicators of malicious intent, data exfiltration, or unauthorized persistence.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may send factual questions or search terms to web/search tools and may save image files locally for attachment.

Why it was flagged

This shows the skill relies on external web tools and optional local file downloads for images. The behavior is disclosed, scoped, and purpose-aligned, but it is still tool use a user should notice.

Skill content
Search the web first with the available web search tool... If the runtime supports media attachments, download the image locally... curl -L --fail '<image-url>' -o shared/artifacts/<descriptive-name>.<ext>
Recommendation

Use it for public factual research, avoid sensitive private questions, download images only from trusted source pages, verify file type and attribution, and do not execute downloaded files.