PII Redactor

• Analyzed: May 14, 2026, 7:34 AM
• Findings: 1
• Version: 1.0.5
• Hash: 22b069ee8d30f8c8db863a315d4a76f1feba0164f39320841cd5da435fa811b7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to redact PII by intercepting all outbound agent responses and transmitting them to a network-hosted service (clawguard-pii). While the SKILL.md includes defensive instructions for the agent to validate the CLAWGUARD_URL (restricting it to localhost or internal HTTPS) and use a bearer token, the capability to capture all communications and the dependency on an external PyPI package represent high-risk behaviors. These features are plausibly necessary for the stated purpose but constitute a significant attack surface and potential exfiltration channel if the service or validation logic is compromised.