Multi-Agent Tenant Upgrade

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.5.2
• Hash: 98560d524dee6419e3cecc08492a2e60072bfc18b890919b7da64f90cbef02a6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The multi-agent-tenant-upgrade skill bundle (v1.5.2) provides a comprehensive set of UI and backend enhancements for OpenClaw, including a session history viewer, an AI-powered agent creation wizard, and authentication status badges. While the skill performs high-risk operations—such as modifying the application source code via git patches, reading API keys from the auth store, and making outbound network calls to LLM providers—these actions are explicitly documented in SKILL.md and are strictly necessary for the described features. The implementation includes robust validation for LLM-generated content in server-agents.ts and uses standard RPC patterns for session and agent management without any evidence of malicious intent or unauthorized data exfiltration.