Skill Reviews

• Verdict: Pass
• Analyzed: May 12, 2026, 4:32 AM
• Findings: 0
• Version: 1.0.1
• Hash: 9559b54aae9d23d4812930864dc47a12eae3bb1266cc7c073765bc75e9b0cd8f
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: skill-reviews Version: 1.0.1 The skill's purpose is to manage public reviews for OpenClaw skills, and its instructions are fully aligned with this goal. All network calls are directed to a single, consistent Supabase function URL. The skill instructs the agent to store its own generated `reviewer_token` in standard locations, but does not attempt to access or exfiltrate other sensitive data. Crucially, `SECURITY.md` explicitly warns the agent against executing untrusted content from review fields, demonstrating a strong security posture and lack of malicious intent. There is no evidence of data exfiltration, arbitrary command execution, or prompt injection designed to subvert the agent.