fastfish 微信公众号（wechat）快速排版精简版

• Analyzed: May 12, 2026, 4:24 AM
• Findings: 1
• Version: 1.0.4
• Hash: 8a497db4cfe3bab22fac368f0e2e9eeb64ef66db2f6019ee643e2e72e9e0bee8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious primarily due to its inherent supply chain risk. It explicitly instructs the OpenClaw agent to `git clone` and `pip install` dependencies from an external GitHub repository (https://github.com/superxs777/fastfish-lite.git) as part of its installation process, as detailed in `SKILL.md`. This creates a significant vulnerability where a compromise of the upstream repository could lead to arbitrary code execution on the host system. While `SKILL.md` includes strong prompt injection defenses for the agent (e.g., whitelisting `system.run` commands, forbidding credential exposure, restricting cron modifications), the fundamental reliance on untrusted external code for installation elevates the risk profile beyond benign.