tripclaw

• Analyzed: May 10, 2026, 6:31 PM
• Findings: 1
• Version: 1.0.0
• Hash: 985397d9e0a844b73789a55946992ee071a90ea55115f8814db9842b0992e1e8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'tripclaw' skill bundle is designed to sync travel itinerary data to a third-party service (TripClaw). The Python script `scripts/import_trip.py` uses standard libraries to send user-provided trip data to a documented API endpoint (api.tripclaws.com) using an API key provided by the user via environment variables. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic strictly follows the stated purpose in `SKILL.md`.