streaming-obs-bootstrap

• Analyzed: May 11, 2026, 7:13 AM
• Findings: 1
• Version: 0.2.0
• Hash: 37af7f6aa9a56a761f7d4281bb23dbcbf1f19af63ffa1c20b548676d811f1ad8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains high-risk behaviors that, while aligned with its stated purpose of OBS automation, present significant security concerns. Specifically, `scripts/start_overlay_server.sh` starts a Python HTTP server that serves the entire OpenClaw workspace directory to the local network, potentially exposing sensitive files or environment variables. Additionally, `scripts/obs_target_switch.sh` directly modifies a SQLite database in the user's home directory (`~/.agentic-obs/db.sqlite`), which is an intrusive configuration method. These behaviors constitute a broad attack surface and potential for unintentional data exposure.