openclaw-eho

• Analyzed: May 9, 2026, 8:00 AM
• Findings: 1
• Version: 1.1.8
• Hash: 6cf862522b779b30aa8b05c06d4a957a36413d1eb48d005e2e404c6e3e5b4b48
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate plugin for fetching Korean real estate transaction data from the 'EveryHouse' API (everyhouse-real-payment.com). The logic in index.js is straightforward, mapping user-provided parameters (region, date, transaction type) to a GET request, and the documentation in SKILL.md and README.md is consistent with this functionality without any signs of prompt injection or malicious intent.