Shipp enables a faster way to create connections to real-time data. It's cost-effective, fast to run, and easy to start.

• Analyzed: May 14, 2026, 3:56 AM
• Findings: 1
• Version: 0.1.4
• Hash: 1f5e33b17132316103d3adf034cc1892dcaf4a1296cd058356e1f678251f4cda
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides documentation and instructions for an AI agent to interact with the Shipp API. The `SKILL.md` file clearly defines `allowed-tools` for `curl` to specific `shipp.ai` domains and `jq`, which is appropriate for the stated purpose. There are no instructions for prompt injection, data exfiltration, malicious execution, persistence, or obfuscation. The `README.md` provides setup instructions for a human user to run an external example project ('Alph Bot'), but these are not executed by the OpenClaw agent and do not pose a threat within the skill bundle itself. The content is aligned with its stated purpose of integrating with a real-time data connector.