Clawmart Skills Empire

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5fb84d4f34e09507d0011ca5de71c21aae96a4b3a5a9b1b2b708150622a122ae
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle appears benign. All files, including markdown instructions, are consistent with a legitimate product for creating and selling AI skills. There is no evidence of prompt injection against the agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `demo.py` script is purely informational, and the `SKILL.md` and `README.md` provide standard installation and usage instructions. While some skill templates imply network communication (e.g., 'Telegram/Discord alerts' in `trading-signals.md`), this is a core, expected functionality for such a skill and does not, in itself, indicate malicious intent without the actual implementation code.