Vanar Neutron Memory

• Analyzed: May 12, 2026, 3:33 AM
• Findings: 1
• Version: 1.3.2
• Hash: e4cd122bd932bebcb8a58c38acbb2acf7f3f4b04cb5bef455d8b1e381f79b13f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle is classified as benign. All scripts (`hooks/*.sh`, `scripts/neutron-memory.sh`) consistently use `jq` to safely construct JSON payloads from user and agent inputs, effectively preventing shell injection vulnerabilities. The skill's functionality is clearly defined as saving and searching agent memory via a specific external API (`api-neutron.vanarchain.com`), and it explicitly states what data is sent and what is not. Auto-capture and auto-recall features are opt-in, and there is no evidence of unauthorized data exfiltration, persistence mechanisms, or other malicious behaviors.