Claude Code Connector

• Analyzed: Mar 26, 2026, 3:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: d8fc93a59b59c994f8296ca177baea1cd5d8d691286d63b1c850e1e7e1ce15df
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill executes a shell script located at a hardcoded absolute path (/Users/mac/.openclaw/workspace/scripts/acp-bridge-claude.sh) that is not included in the bundle. This creates a dependency on an external, unverified file and poses a risk of arbitrary command execution or local privilege exploitation, as the script's logic and input handling for the 'prompt' parameter are unknown and reside outside the skill's scope.