AuditClaw Azure

• Analyzed: May 12, 2026, 4:08 AM
• Findings: 1
• Version: 1.0.3
• Hash: 27136eb8054e7c424fa5c46eda041e822f03f41cda7acdb32823b7e7dfb776d6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is an Azure compliance auditing tool designed for read-only checks. All Azure API calls are for listing resources or retrieving configurations, consistent with its stated purpose. Evidence is stored locally in `~/.openclaw/grc/compliance.sqlite`. The `SKILL.md` and `README.md` provide legitimate setup instructions for read-only Azure roles and local script execution, without any prompt injection attempts to subvert the agent. The use of `subprocess.run` in `scripts/azure_evidence.py` to interact with a sibling skill's `db_query.py` is a standard OpenClaw pattern, and the arguments passed are controlled by the skill's internal logic, not user input. No evidence of data exfiltration, backdoor installation, or other malicious intent was found.