Prompt Injection Removal

• Analyzed: May 11, 2026, 5:00 AM
• Findings: 1
• Version: 1.0.1
• Hash: f3ab18557ed2e7bc12fe916e1fe3d26be3ed9ca2be957be9c7d1f246fa88201e
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill bundle is designed as a defensive mechanism against prompt injection attacks. The `SKILL.md` and `PROMPT.md` files contain explicit instructions for the OpenClaw agent to act as a 'Zero-Trust' sanitization engine, specifically to identify and ignore instructions within untrusted input. The `references/security.md` documentation further clarifies that phrases like 'ignore previous instructions' are included as negative constraints for the sanitization agent, not as instructions for the OpenClaw agent to follow. The `setup.sh` script is benign, merely creating the necessary markdown files. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or persistence mechanisms.