Knowledge Base

• Analyzed: May 3, 2026, 4:46 PM
• Findings: 1
• Version: 1.0.0
• Hash: 9ab9729a6e98241469a94f40c14f6e612123b5926ac8f1b2bf0b7c104f0e1ef0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a local knowledge base with automated file ingestion and vector search. It exhibits high-risk behaviors including automatic dependency installation via `subprocess.run` in `scripts/init.py` and `scripts/vector_index.py`, which can lead to arbitrary code execution during setup. Additionally, `scripts/auto_ingest.py` monitors and processes files from the shared `/tmp/openclaw` directory, which could be exploited for unauthorized data injection. While these actions are aligned with the stated 'zero-config' purpose, the use of high-privilege commands and predictable temporary paths warrants a suspicious classification.