Skills Browser

• Analyzed: May 11, 2026, 6:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1a5c90dfb29745e25a8427b89e581ed17bab8b3ca3359f60106722d2f0fb3f37
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'ai-skills-browser' bundle is a legitimate utility designed to provide a local web interface for browsing and viewing OpenClaw skill documentation. It uses a Python-based HTTP server (server.py) to expose an API that reads SKILL.md files from the local filesystem and a frontend (index.html) that renders them using standard libraries like marked.js and highlight.js. While the server binds to all network interfaces (0.0.0.0) and lacks HTML sanitization for rendered markdown—which are minor security vulnerabilities—there is no evidence of malicious intent, data exfiltration, or unauthorized execution logic across the shell scripts, Python code, or documentation.