User Authentication System

• Analyzed: May 12, 2026, 4:29 AM
• Findings: 1
• Version: 0.1.1
• Hash: 49d2c58d6207753027c92e90ab022db8590cdb188fbc499fac3fc8c07eadf2b0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for 'user-authentication-system' is classified as benign. The skill is designed as a robust, local authentication and authorization system, employing strong security practices such as bcrypt for password hashing, secure session token management, 2FA, account lockout, and comprehensive audit logging. Crucially, the `SKILL.md` documentation explicitly outlines critical file system permission hardening (`chmod 700 /data/auth/`, `chmod 600 /data/auth/users/*/credentials.json`) required to protect sensitive data, demonstrating an awareness of security implications within the OpenClaw environment rather than malicious intent. There is no evidence of data exfiltration, backdoors, or prompt injection attempts against the agent in the provided content; the `SKILL.md` serves as legitimate user instructions.