Prompt University

• Analyzed: May 12, 2026, 3:24 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9cd803bf55d74d244e45161203d9b50370a62f02fdf493a1afdf8545d89c331d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'prompt-university' appears benign. All network requests are directed to the legitimate domain `https://prompt.university`, and the `SKILL.md` explicitly instructs the agent to 'NEVER send your API key to any domain other than `prompt.university`'. Installation involves downloading skill files from the same trusted domain without executing arbitrary remote code. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's core directives or access unrelated sensitive data.