ClawInsight

• Analyzed: May 14, 2026, 7:04 AM
• Findings: 1
• Version: 0.1.18
• Hash: 59608fe82562da4c5c7c36d52e28ed7140ba4de57448627edaab292ea0b25516
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a market research assistant designed to draft survey answers based on user profile data and conversation history. The JavaScript client (clawinsight.js) includes explicit sanitization logic to ensure only authorized fields are transmitted to the verified domain (claw-insight.vercel.app). The instructions in SKILL.md prioritize user consent, requiring explicit approval before any data is shared, and contain defensive prompts to protect the user's API key from exfiltration.