Agentic Security Audit

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 220f00565e4da0560b8c4e7b9733f21393fa2ed6addda86e668e7cfb555fe786
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'agentic-security-audit' is designed to perform comprehensive security audits on codebases, infrastructure, and agentic AI systems. It utilizes standard security tools and shell commands (e.g., `npm audit`, `pip-audit`, `grep`, `find`, `openssl`, `curl`, `git log`) to detect vulnerabilities, hardcoded secrets, misconfigurations, and agent-specific threats like prompt injection and memory poisoning. All commands and scripts are focused on reporting potential issues, not on exploiting them or exfiltrating data. The `SKILL.md` itself does not contain any prompt injection attempts against the agent, nor does it exhibit any malicious behaviors such as data exfiltration, unauthorized remote control, or persistence mechanisms. Its actions are entirely aligned with its stated purpose of security auditing.