glass2claw

• Analyzed: May 12, 2026, 4:24 AM
• Findings: 1
• Version: 2.3.3
• Hash: 373de10e2cd26cec5e2c8e49dd8724e8cbb2ef4518245897781e80d11c94ff22
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for hands-free image logging and routing. Analysis of all files, including the agent instructions in `SKILL.md`, `SAMPLE_AGENT.md`, and `SAMPLE_SOUL_WINE.md`, reveals no evidence of malicious intent. The skill utilizes standard OpenClaw tools (`sessions_send`, `message`) for inter-agent communication and media handling. While `SAMPLE_AGENT.md` uses prompt chaining to instruct a specialist agent, the instructions are benign and directly related to the skill's stated purpose (e.g., 'Post the image to the channel, then analyze and log to your database'). The skill explicitly states that users must configure their own database credentials and that all routing logic runs on the user's OpenClaw instance, indicating no attempt at credential theft or unauthorized data exfiltration. No suspicious external calls, obfuscation, or persistence mechanisms were found.