Clawdbot Release Check

• Analyzed: May 13, 2026, 3:00 AM
• Findings: 1
• Version: 1.0.1
• Hash: b727b8d543487acbe31ed6996e5dc018e9a89e455942529e2dd80e0473e2f875
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to check for new clawdbot releases and notify the user. The `scripts/check.sh` script fetches release information from the official GitHub API (`https://api.github.com/repos/clawdbot/clawdbot/releases`) using `curl` and processes it locally with `jq`, `grep`, and `sed`. It stores state and cache files in `~/.clawdbot`. The `scripts/setup.sh` script creates a scheduled task (cron job) in `~/.clawdbot/cron/jobs.json` to run `check.sh` daily. The prompt-injection surface in `scripts/setup.sh`'s cron job payload (`message: "UPDATE_CHECK: Run ... and if there is output, send it to the user."`) is benign and directly aligns with the skill's stated purpose, without attempting to manipulate the agent for malicious actions. No evidence of data exfiltration, unauthorized execution, or other malicious intent was found.