Skill Firewall

• Analyzed: May 12, 2026, 3:38 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0b878bfccc8ab299d7d176f3e5a3524ee50b7aff2da07cdb290b3ac92329dcd6
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is designed as a security layer to prevent prompt injection attacks against the OpenClaw agent from external skills. The `SKILL.md` file provides explicit instructions for the agent to analyze external skill content, identify its legitimate purpose, and then rewrite it from scratch, discarding any potentially malicious elements like hidden HTML comments, Unicode tricks, or remote execution commands (e.g., `curl`, `wget`). It strictly forbids the agent from copying external content verbatim, executing external commands, or saving any rewritten skill without explicit human approval. The instructions are entirely defensive and aim to enhance the security posture of the agent.