ContextClaw Plugin Usage

• Analyzed: May 12, 2026, 4:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4535727969c0522675b4e3c638c2066586b9bcf24e5789fcc19a99b20dd81ee2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the agent to install an external npm package globally (`@rmruss2022/contextclaw`), which introduces a supply chain risk. Additionally, the skill provides commands with the capability to delete user session files, a high-risk operation, even though the `SKILL.md` instructions emphasize safety features like dry runs and user confirmation. There is no evidence of malicious intent such as data exfiltration, backdoor installation, or harmful prompt injection against the agent, but the inherent risky capabilities warrant a 'suspicious' classification.