RepoMedic

• Analyzed: May 12, 2026, 3:37 AM
• Findings: 1
• Version: 1.0.6
• Hash: 02ebcac8b82f0160b6815ac2894cc23203c6e605e7beaa03ab6765b3ff8e4300
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle 'repomedic' is classified as benign. The `SKILL.md` file, which contains instructions for the AI agent, explicitly defines strong safety guardrails, a least-privilege policy, and non-negotiable 'must NOT' actions. These include never pushing directly to main/master, requiring a branch+PR workflow, limiting local workspace access to the target repository, and preventing external actions or modification of files outside the target repo. While the skill requires capabilities like file modification and command execution (e.g., `pnpm`/`npm`/`yarn`), these are essential for its stated purpose of dependency remediation and are heavily mitigated by the explicit safety instructions, approval gates, and risk labeling, demonstrating a clear intent to operate safely and prevent malicious behavior.