Input Validator

• Analyzed: Apr 30, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: d5cb88cd42b9ba3eae483580c1beddcd940a35d887cbe816fb273ee5b92623c9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills 'input-validator' skill is designed to detect and warn against malicious and suspicious content, including shell commands (RCE, file deletion, privilege escalation) and prompt injection attempts. Both the `SKILL.md` documentation and the `scripts/input-validator.py` code consistently describe and implement this security-enhancing function. The Python script uses well-defined regular expressions to identify dangerous patterns and suspicious phrases. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection against the agent itself within the skill's files. The self-verification commands in the markdown files are benign self-checks for the agent.