Toolbelt

• Analyzed: May 13, 2026, 9:41 PM
• Findings: 1
• Version: 1.0.3
• Hash: 4e456e744ec3bd3fef06b049291eacc7563e062dc9035002147c57d2237d5b54
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill automates the provisioning of a third-party account and modifies sensitive local configuration files (e.g., ~/.openclaw/mcp.json, ~/.cursor/mcp.json) to install an MCP server. While the SKILL.md documentation emphasizes user consent and transparency, the instructions require the agent to perform high-risk actions including writing to system configs and executing shell commands (claude mcp add). It also facilitates the exfiltration of user-approved data to an external cloud service (toolbelt.ai) for processing and storage.