DropClaw Store

• Verdict: Pass
• Analyzed: May 12, 2026, 4:08 AM
• Findings: 0
• Version: 1.0.0
• Hash: ccf80d77efe7f57a7c78164b58c08a8314bd6f378a72e8c5179f085d14a6ea46
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: dropclaw-store Version: 1.0.0 The skill bundle is designed for storing and retrieving encrypted files via the DropClaw service. All described actions, including network requests to `https://dropclaw.cloud` and client-side encryption, align with its stated purpose. The `claw.json` explicitly requests `network` permissions, which is necessary for its functionality. There are no signs of prompt injection attempts in `SKILL.md` to subvert the agent, nor any evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the provided files. The instructions to install external SDKs (`npm i dropclaw` or `pip install dropclaw`) represent a potential supply chain risk, but the skill itself does not perform these installations or exploit them.