Agent Brainstorm Chair

• Analyzed: May 10, 2026, 6:55 AM
• Findings: 1
• Version: 1.0.0
• Hash: b2972de1cd0c6a89941ff94d1189258cdc4f3d6f40ac43ab24b011e42b5f2334
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a multi-agent brainstorming framework but includes high-risk capabilities and potential vulnerabilities. Specifically, 'SKILL.md' instructs the agent to perform environment discovery using shell commands ('which', 'ls'), and 'openclaw_agent_query.py' utilizes low-level system calls like 'pty.fork' and 'os.execvpe' to execute binaries. Furthermore, 'openclaw_agent_query.py' contains a potential path traversal vulnerability because it uses the 'agent_id' parameter to construct file paths for session log recovery without adequate sanitization. While these behaviors are plausibly aligned with the stated purpose of bridging OpenClaw agents, the combination of high-privilege execution and lack of input validation meets the threshold for a suspicious classification.