Code Patent Scanner

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: code-patent-scanner Version: 1.4.0 The skill is designed to analyze local codebases for distinctive patterns, explicitly stating it operates locally, does not transmit data, and does not modify files. The instructions in SKILL.md detail extensive file system read access for code analysis, which is necessary for its stated purpose. There are no instructions for network calls, file modifications, or any form of prompt injection aimed at subverting the agent's security boundaries or exfiltrating data. The 'Sensitive Data Warning' and 'Required Disclaimer' are responsible disclosures to the user, not indicators of malicious intent by the skill itself.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read and summarize parts of your codebase while performing the scan.

Why it was flagged

The skill directs the agent to inspect local source files in the current directory or a provided path. This is purpose-aligned for code analysis, but source code may contain sensitive intellectual property or embedded secrets.

Skill content
First, understand the codebase structure: 1. Check if path is provided, otherwise use current directory ... Include: `.go`, `.py`, `.ts`, `.js`, `.rs`, `.java`, `.cpp`, `.c`, `.rb`, `.swift`
Recommendation

Run it only on repositories you intend to analyze, and avoid including files with secrets, credentials, or unrelated private data.