Digital Clawatar

• Analyzed: May 12, 2026, 4:11 AM
• Findings: 1
• Version: 1.0.2
• Hash: 1930593c1141a1b4f1317378eae74106eac04301784867a788477db84e27b190
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for UNITH Digital Humans is benign. It provides a well-structured and secure interface for interacting with the UNITH API. Key indicators include secure handling of `UNITH_EMAIL` and `UNITH_SECRET_KEY` via `scripts/auth.sh` (using `jq` for safe JSON construction and `chmod 600` for token cache), robust API interaction with `curl` and `jq` in `scripts/_utils.sh` (preventing shell injection), and clear, non-malicious instructions in `SKILL.md` for the agent. All API calls are directed to the legitimate `https://platform-api.unith.ai` endpoint, and there is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms, or obfuscation.