SkillGuard Scanner

• Analyzed: May 11, 2026, 3:49 AM
• Findings: 1
• Version: 1.1.0
• Hash: 5d7bf7d0e2d2731fdbd89e33873878b187585c5e2c26b8cae504682154bbb3b1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw SkillGuard scanner is a security tool designed to detect malicious patterns, such as reverse shells, obfuscation, credential theft, and data exfiltration, in other OpenClaw skills. Analysis of `scripts/scanner.py` confirms that it identifies these patterns using regex but does not execute them itself. The only external command executed is `clawhub search`, which is benign and safely invoked. The `SKILL.md` and `references/threat-landscape.md` files describe the scanner's purpose and provide examples of threats it detects, without containing any malicious prompt injections or executable code for the agent. All observed behaviors are consistent with a legitimate security scanning utility.