Axioma Guard Ultimate

• Analyzed: May 10, 2026, 10:06 AM
• Findings: 1
• Version: 1.2.0
• Hash: 3d90b61d93065e3cd0b9a67860d4e13e382d49aedd46a9c0abddaee68f3b6dd3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed as a security and quality enforcement tool but contains high-risk destructive capabilities and highly irregular hardcoded paths. The `scripts/destroy.py` script uses `shutil.rmtree` to permanently delete directories, and `SKILL.md` contains instructions that could lead an AI agent to autonomously delete files under the guise of 'quarantining' threats. Furthermore, the entire bundle relies on hardcoded absolute paths to a specific user's directory (`/media/ezekiel/Merlin/.openclaw/workspace/skills/`), which is a significant red flag for portability and suggests the tool is either highly localized or intended for a specific, pre-configured environment. While no clear evidence of data exfiltration or intentional malware was found, the combination of destructive commands and rigid pathing is high-risk.