中文 Axioma 守护

• Analyzed: May 8, 2026, 10:06 AM
• Findings: 1
• Version: 2.0.0
• Hash: ac8aec41ca4326d0782ff3458bc0514687a874a2573be39bc72c2bef2e62409e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill claims to be a security scanner but contains significant inconsistencies and potential telemetry risks. The SKILL.md instructions (written in Chinese) refer to a script named 'merlin-guard.py', whereas the provided Python script (containing French comments) is named 'clawguard.py'. The script makes external network calls to 'clawdex.koi.security' and 'clawhub.ai' to verify skills, which could be used to track a user's installed components. Additionally, the instructions command the agent to 'Notify Alexandre' upon threat detection, which constitutes an instruction to exfiltrate system security status to an unidentified third party.