Client Communication Engine

• Verdict: Pass
• Analyzed: May 12, 2026, 4:29 AM
• Findings: 0
• Version: 0.1.0
• Hash: 8512c5b400a091d321361aa01ea270b86886054aa30b584a97135b7363fa0d27
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: client-communication-engine Version: 0.1.0 The skill is designed for client communication, requiring SMTP credentials and network access (via `curl`) for sending emails and Slack notifications. While these are high-risk capabilities, the `SKILL.md` explicitly details a robust approval workflow, requiring mandatory human review and explicit approval for all outgoing communications, with no auto-send exceptions. File system access is confined to the `OPENCLAW_DATA_DIR` for logging and data retrieval. There is no evidence of intentional data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection instructions designed to bypass security controls or cause harm. The skill's design emphasizes safeguards and transparency, aligning with a legitimate business purpose.