Agent Config Sync

• Analyzed: May 16, 2026, 8:16 AM
• Findings: 1
• Version: 1.5.1
• Hash: 6f120c50013e5633020148b4cf9a7e1dbcbf0419d9400ed1947da7123497dc39
• Source: palm
• External report: View on VirusTotal

Findings (1)

The agent-config-sync skill bundle is a comprehensive tool for synchronizing configurations across multi-agent OpenClaw deployments. It uses a master-agent architecture to track version changes via a structured CHANGELOG.md and dispatches updates through session messages or local file writes. Security is a primary focus, with scripts (init_sync.sh, force_sync.sh, revert_sync.sh) implementing strict path whitelisting (restricting access to ~/.openclaw/workspace-*), mandatory --confirm flags for write operations, and atomic file-writing procedures to prevent corruption. The bundle includes detailed security documentation, loop detection to prevent infinite sync cycles, and rollback mechanisms using snapshots. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the skill's broad file-system permissions are strictly aligned with its stated purpose.