Sentinel Shield

• Analyzed: May 12, 2026, 4:16 AM
• Findings: 1
• Version: 0.2.0
• Hash: 78eb2ad110b892ce4bbf0d7e2ed0d10b8bc77522b844df0b92198a2bc9279590
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Sentinel Shield skill is designed for runtime security monitoring, including file integrity checks, rate limiting, and prompt injection detection. While it accesses sensitive files (e.g., `~/.openclaw/openclaw.json`, `~/.ssh/authorized_keys`) via `scripts/fileIntegrity.js` and can send alerts to Telegram via `scripts/monitor.js`, these actions are explicitly aligned with its stated security purpose. There is no evidence of intentional data exfiltration, unauthorized remote control, persistence mechanisms, or shell injection vulnerabilities in the `scripts/sentinel.js` CLI arguments. The `SKILL.md` and `INSTALL.md` instructions are clear and do not contain malicious prompt injection attempts against the agent.