Dont Hack Me

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.1
• Hash: b50f8098d3456baa0aa14d2646f3c72cf9aabdea98315061a85f5fa2f4e72ed9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill performs a security self-check and auto-fix for the agent's own configuration file (`~/.clawdbot/clawdbot.json`). All actions, including reading the config, checking file permissions with `stat`, generating tokens with `openssl`, and modifying the config with `chmod`, are directly aligned with the stated purpose of auditing and hardening the agent's security. The skill explicitly instructs the agent to ask for user consent before applying any fixes and to back up the configuration file (`cp ~/.clawdbot/clawdbot.json ~/.clawdbot/clawdbot.json.bak`) before making changes. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempting to subvert the agent for harmful purposes.