mtg-edh-deckbuilder

• Analyzed: May 12, 2026, 3:24 AM
• Findings: 1
• Version: 1.0.3
• Hash: 0af16f40e300a91a4828dc5b20c5836b707d086e8f74af1d0a143942dc273b8f
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The OpenClaw skill bundle for Scryfall MTG card search is classified as benign. The `SKILL.md` provides clear, well-scoped instructions for the AI agent to interact with the Scryfall API, without any prompt injection attempts to subvert its purpose or security. The `scripts/scryfall_search.py` script uses standard Python libraries (`urllib.request`) to make HTTP GET requests exclusively to `https://api.scryfall.com`, which is the stated and expected API endpoint. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or attempts to access sensitive local resources.