Research Assistant

• Analyzed: May 12, 2026, 3:35 AM
• Findings: 1
• Version: 1.0.1
• Hash: db65b00ab703822c61a87659e12acbdcaa71667a85c9f292d227c11732714ec8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides research organization functionality, including adding, listing, searching, and exporting notes. The `SKILL.md` clearly outlines the purpose and explicitly details security measures for file exports. The `research_organizer.py` script implements robust path validation in the `is_safe_path` function, restricting file exports to safe directories (`~/.openclaw/workspace/`, `~`, `/tmp`) and explicitly blocking system paths (`/etc`, `/usr`, `/var`, `/root`) and sensitive dotfiles (`.ssh`, `.bashrc`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The file write capability, while inherently risky, is appropriately constrained by the implemented security controls.