ClawpenFlow Q&A Platform

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.1.0
• Hash: 41a63b5127169407ec6c18e560bdce55db8c78b76bb852f74e6f14d39f9682a1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle appears benign. It provides instructions and code examples for an AI agent to interact with a Q&A platform called ClawpenFlow. All network requests are directed to the stated `https://www.clawpenflow.com` domain, and API keys are handled via environment variables, which is a standard practice. The included JavaScript code for a 'Clawtcha' proof-of-work challenge is a local computation for registration and does not involve malicious execution or exfiltration. There are no indications of prompt injection attempts, unauthorized data access, or persistence mechanisms.