research-analyst

MaliciousAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: ah-research-analyst Version: 1.0.0 The skill bundle defines a persona and workflow for a research analyst. The content in SKILL.md consists entirely of descriptive instructions and methodologies for information gathering and analysis. There is no executable code, no network activity, and no evidence of malicious intent or prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could overtrust a research result if impressive-looking metrics are not tied to the actual sources and methodology used.

Why it was flagged

The skill provides a fixed example containing specific source counts, data-point counts, and confidence claims; if reused literally, those numbers could overstate the work actually performed.

Skill content
Delivery notification: "Research analysis completed. Analyzed 234 sources yielding 12.4K data points... with 94% confidence level."
Recommendation

Treat the notification as a placeholder only. Require task-specific citations, methodology notes, and only metrics that were actually measured.

What this means

Private, stale, or low-quality research context could be retained or reused in later analysis if memory/archive features are enabled.

Why it was flagged

The instructions anticipate using existing context and maintaining or reusing research artifacts. This is purpose-aligned, but could involve persistent or reused context if the hosting agent provides memory features.

Skill content
Query context manager... Review existing knowledge... Knowledge management: - Research archive - Source database - Finding repository ... - Reuse strategies
Recommendation

Clarify where research notes are stored, limit sensitive inputs, scope or clear memory when appropriate, and verify reused sources before relying on conclusions.