Birdbuddy

• Analyzed: May 12, 2026, 4:27 AM
• Findings: 0
• Version: 1.0.0
• Hash: 911ab5dca44cbde3c948d5d741bcb49dfc924d5b03084d543ae5f4130d6f0ef5
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: birdbuddy Version: 1.0.0 The skill bundle appears benign. It provides a Python script (`run.py`) to interact with the Bird Buddy API, as described in `SKILL.md` and `README.md`. Credentials (email and password) are requested via environment variables (`BIRDBUDDY_EMAIL`, `BIRDBUDDY_PASSWORD`), which is a standard and appropriate method. The `run.py` script safely handles command-line arguments by casting numerical inputs to integers and passing string inputs directly to Python functions, mitigating shell injection risks. There are no indications of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent designed to subvert its behavior.