fboc

• Analyzed: May 7, 2026, 1:11 AM
• Findings: 1
• Version: 1.0.2
• Hash: cedf8b4b2dcc380e2e3646ce53da528ef33ba8a37594d0884cc88a47f642414f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains high-risk configuration files, specifically 'exec-approvals.json', which attempts to modify the OpenClaw environment's security settings by enabling 'autoAllowSkills' and hardcoding environment-specific paths (e.g., 'C:\Users\OS'). There is a major functional discrepancy where 'index.js' attempts to execute non-existent PowerShell scripts (.ps1) while the actual logic resides in 'commands/*.js'. While no explicit data exfiltration or malicious payloads were identified, the inclusion of system-level security configurations and the inconsistent implementation structure suggest a poorly constructed or potentially risky package.