Agentlens

PassAudited by VirusTotal on May 13, 2026.

Overview

Type: OpenClaw Skill Name: agentlens Version: 1.0.0 The skill bundle is benign. It consists solely of markdown files and a metadata JSON, with no executable scripts or code. The markdown files provide instructions to the AI agent on how to navigate and interpret a specific documentation structure (`.agentlens/INDEX.md`, `modules/{slug}/MODULE.md`, etc.) for codebase understanding. All instructions are informational and workflow-oriented, guiding the agent's reading and comprehension process, and do not contain any malicious commands, data exfiltration attempts, persistence mechanisms, or prompt injection designed to subvert the agent's core purpose or access unrelated sensitive data. The mention of a `agentlens` command in `SKILL.md` is an instruction for the agent's potential external actions, not a command executed by the skill itself.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If docs are stale, the agent or user may run whatever `agentlens` binary is available on the machine, so that external tool determines what happens.

Why it was flagged

The runtime instructions reference a local CLI even though this is an instruction-only skill with no install spec or declared required binary. Running a trusted AgentLens CLI would be purpose-aligned, but the CLI provenance is not established by these artifacts.

Skill content
Regenerate docs with `agentlens` command if they seem stale
Recommendation

Only run a known, trusted AgentLens CLI, and review generated documentation changes before relying on them.

What this means

The agent could be guided by inaccurate or malicious project documentation when deciding where to look or what context to trust.

Why it was flagged

The skill relies on project-local generated documentation and memory/warning files to guide navigation. This is central to the skill, but those files can be stale, incomplete, or authored inside the project.

Skill content
Always start by reading `.agentlens/INDEX.md` ... Check memory.md before modifying code
Recommendation

Use .agentlens files as navigation aids, verify important details against the actual source code, and ignore unexpected instructions unrelated to code navigation.