Goal Mode

• Analyzed: May 12, 2026, 4:27 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0664ac8d89a5749e0afc2725c2989ca7602477f57357ff5a189f4f4f73c06268
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle is classified as benign. All file operations are strictly confined to the `/home/ubuntu/.openclaw/workspace` directory, using absolute paths as explicitly instructed in `SKILL.md` and other reference files. The `allowed-tools` are limited to `read` and `write`, preventing network access or arbitrary command execution. Furthermore, `SKILL.md` explicitly forbids the use of `exec` or `bash` for directory creation, reinforcing security. The instructions for the AI agent are clear, prescriptive, and consistently emphasize adherence to defined processes and data structures, showing no evidence of prompt injection attempts to subvert the agent's intended behavior or exfiltrate data.