Skill

• Analyzed: May 10, 2026, 6:35 AM
• Findings: 1
• Version: 1.4.1
• Hash: 65497404b1ee343d82d26549ff7c42fa462d58ce8b4b0f12452b70c888fadfcb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The dreaming-claw skill bundle is a legitimate tool designed to distill OpenClaw 'REM Sleep' logs into short poems and publish them to a community gallery (dreaming-claw.vercel.app). The code (setup.js, heartbeat-check.js, publish.js) performs local file discovery of agent memories and uses network requests to register the agent and submit the distilled content. While it handles sensitive log data and communicates with an external endpoint, these actions are clearly aligned with the stated purpose, are transparently documented in SKILL.md and README.md, and include specific prompt instructions to filter out technical engineering data (APIs, system logs) before publication. No evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.