Gradient Knowledge Base

• Analyzed: May 12, 2026, 4:09 AM
• Findings: 1
• Version: 0.1.4
• Hash: 86327ea512c64b2b041ef7480cab217070bc1acf8746695d825d6c0eed7cf5e6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'gradient-knowledge-base' is designed to interact with DigitalOcean Gradient AI and Spaces services for RAG pipelines. All network communications are directed to official DigitalOcean endpoints, and sensitive API tokens are handled as expected for cloud service interaction. The `SKILL.md` provides clear instructions and security advice, and the Python scripts (`gradient_kb_manage.py`, `gradient_kb_query.py`, `gradient_spaces.py`) implement the stated functionality without evidence of malicious intent, such as data exfiltration to unauthorized domains, arbitrary command execution, or persistence mechanisms. Notably, `gradient_kb_query.py` uses role separation to mitigate prompt injection against the LLM, which is a good security practice.