Personal CRM

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 1.1.0
• Hash: d2330b4f3f5513a63bdc8f1ffc1850f39e7ad488fb0403a097ae9cd23914d85b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'personal-crm' appears benign. The `SKILL.md` clearly outlines its purpose as a personal relationship manager, storing all data locally in `NETWORK.md` and explicitly stating 'Never shared externally' under the 'Privacy' section. The only command found, `gog calendar list Birthdays`, is a read-only operation for importing birthdays, aligning with the stated functionality and requiring declared optional calendar access. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's purpose.