Skill Lifecycle

• Analyzed: Mar 26, 2026, 11:01 PM
• Findings: 1
• Version: 0.2.0
• Hash: b1a22b98c8e95354efe08cae17c944dca4f2a92957ac50b1a0fa8806b762f4a6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate developer tool designed for managing the lifecycle of OpenClaw skills, including versioning, automated testing, static code analysis, and Git integration. It uses standard libraries (click, rich, yaml) and subprocess calls to perform its stated functions, such as running local tests and invoking the 'clawhub' CLI for publishing. While it contains a minor implementation flaw in commands/config.py regarding default editor detection, there is no evidence of malicious intent, data exfiltration, or harmful prompt injection.