Dream Of Clawra

• Analyzed: May 14, 2026, 5:27 AM
• Findings: 1
• Version: 1.0.8
• Hash: 8a6a9e6893071743240958fd5f078bb0856b72fdfb0c52de9acccc0bdcfda613
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle acts as a persona installer that modifies the agent's core identity and configuration files (SOUL.md and IDENTITY.md) via bin/cli.js. It requests high-risk permissions including Bash, Write, and WebFetch, and uses shell scripts (clawra-selfie.sh) to interact with the OpenClaw gateway using local authentication tokens. While these actions are aligned with the stated purpose of installing a 'selfie' persona, the broad capability to overwrite agent logic and execute shell commands presents a significant attack surface without sufficient input sanitization.