401(k) Plan Health Skill

• Verdict: Pass
• Analyzed: May 5, 2026, 6:31 PM
• Findings: 0
• Version: 1.0.0
• Hash: a1e948300ae0efa72adbff79a1da0da475b98f723f4d61078895d66fc55b8706
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: 401k-plan-health Version: 1.0.0 The skill bundle is a research tool designed to fetch and analyze public 401(k) plan data from planprovider.pro. The instructions in SKILL.md are well-defined, focusing on data retrieval via standard HTTP GET requests and providing structured analysis without any evidence of malicious intent, data exfiltration, or unauthorized command execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

Company names, states, or EINs used for lookup may be sent to planprovider.pro, and the summary depends on that site's returned data.

Why it was flagged

The skill instructs the agent to make outbound web requests to planprovider.pro; this is clearly disclosed and central to the stated company plan research purpose.

Skill content

GET https://planprovider.pro/<path>
Accept: text/markdown

Recommendation

Use it when you are comfortable querying planprovider.pro, and verify the returned source URL and filing year before relying on the results.