Skill Guard 1.0.2

• Analyzed: May 11, 2026, 6:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6bce0cb3d03066f3ed17a859da1d225f2a0cfb9a070659512e84ed3cedb0e8d4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill-guard bundle is a security utility designed to scan other OpenClaw skills for vulnerabilities before installation. It uses a bash script (scripts/safe-install.sh) to download skills to a staging directory via the clawhub CLI and then analyzes them using the legitimate mcp-scan tool via uvx. The logic is transparent, follows a 'stage-scan-install' workflow, and contains no evidence of data exfiltration, malicious execution, or hidden prompt injections.