Clawdbot Documentation Expert

• Analyzed: May 14, 2026, 3:01 AM
• Findings: 1
• Version: 1.2.2
• Hash: d0786ecb664796d7e8d082947edd04e305ddee332682490f0aae4dcdacdac97c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All shell scripts (`scripts/*.sh`) are placeholders that only print messages to the console and do not perform any actual system commands, network requests, or file operations. The `SKILL.md` instructions guide the AI agent to act as a documentation expert, using these placeholder scripts and referencing a legitimate documentation domain (docs.clawd.bot). Configuration snippets in `snippets/common-configs.md` include environment variable placeholders (e.g., `${DISCORD_TOKEN}`), which is a standard practice for user-provided configuration and not an attempt at data exfiltration by the skill itself.