OpenClaw工作目录医生

• Analyzed: May 11, 2026, 6:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 46efef425ea34cabd27b5698e4e543354ca7c8216b3ae757378eaffdd4595cd4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle instructs the AI agent to direct users to download and execute PowerShell scripts from an external GitHub repository (github.com/maxkandel99-arch/workspace-health) to perform system-level directory fixes. While the stated intent is benign (workspace maintenance), the pattern of encouraging users to run unverified remote scripts (detect-nested-workspace.ps1, fix-nested-workspace.ps1) is a high-risk behavior and a common vector for malware delivery. There is no evidence of intentional malice in the provided text, but the reliance on external, unverified code execution warrants a suspicious classification.