OpenClaw Deck

• Analyzed: May 12, 2026, 3:42 AM
• Findings: 1
• Version: 0.1.0
• Hash: 034ccdbd44369453d9dbc7c83d0102fc74f28de06dbf88f4c0ca75f5e2d418f2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Deck skill bundle is a standard React/Vite application designed to launch a local web UI for managing and chatting with OpenClaw agents. The `SKILL.md` instructions are benign, directing the agent to install dependencies (`npm install`) and start a local development server (`npm run dev`), which are necessary steps for a web UI skill. The frontend code primarily handles UI rendering and establishes a WebSocket connection to a local OpenClaw Gateway (default `ws://127.0.0.1:18789`), optionally using `VITE_GATEWAY_URL` and `VITE_GATEWAY_TOKEN` for configuration. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All observed behaviors are aligned with the stated purpose of providing a local agent management interface.