OpenClaw Debug

• Analyzed: May 11, 2026, 4:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: a5a76939c6b713ee3c8a96155fcefef021b7fab772e90ab336bb8c8244c0a36f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its instruction to execute a local command (`openclaw --version`) and perform network requests to external URLs (docs.openclaw.ai, github.com, raw.githubusercontent.com) as part of its troubleshooting workflow, as seen in `SKILL.md`. While these actions are plausibly needed for the stated purpose and target official OpenClaw resources, the presence of command execution and external network access represents risky capabilities that could be exploited or misused if the agent's input were compromised or if the skill's intent were malicious. There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or prompt injection attempts against the agent within the skill itself.