Cnpj Lookup

• Analyzed: May 11, 2026, 5:14 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6311aa7ae4a55b1136ac996fbe1e6788af6899de406b7ed8bab18475dbb80c1e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for CNPJ lookup is benign. The `scripts/cnpj_lookup.py` script correctly implements its stated purpose of querying public CNPJ APIs, handling caching, rate limiting, and data normalization. There is no evidence of data exfiltration, malicious execution (e.g., `os.system`, `eval` on untrusted input), persistence mechanisms, or obfuscation. The `SKILL.md` and `README.md` files contain only legitimate instructions for the agent and user, with no attempts at prompt injection to manipulate the agent into unauthorized actions. The use of `urllib.request` and `json.loads` for network communication and data parsing is standard and secure within this context.