Startup Agent (→ raon-os)

• Verdict: Pass
• Analyzed: May 12, 2026, 4:17 AM
• Findings: 0
• Version: 0.7.27
• Hash: fad4e5e83ca737e071458ed3ec838c999cf93178e5d16bf4f0b3678e65d13810
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: startup-0to1 Version: 0.7.27 This skill bundle is an alias package that transparently directs users to install another skill, 'raon-os', using the standard `clawhub install` command. The `SKILL.md` file clearly states its purpose and provides installation instructions for the user. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or any other high-risk behaviors. All files contain standard metadata and documentation consistent with a benign alias skill.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

Installing raon-os may introduce additional capabilities, permissions, integrations, or data handling that are not assessable from this alias package's artifacts.

Why it was flagged

The current package is instruction-only and intentionally delegates functionality to a separate skill whose artifacts are not included in this review.

Skill content

This is an alias package for **[raon-os](https://clawhub.com/skills/raon-os)**.

```bash
clawhub install raon-os
```

Recommendation

Review the raon-os skill's own documentation, permissions, install steps, credentials, and scan results before installing it.