Planetscale Cli Skills

• Analyzed: May 12, 2026, 3:55 AM
• Findings: 1
• Version: 1.0.2
• Hash: 2f72f09d08386ba2325ddc39ccabfce1583d073c45693715c513478484152550
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for PlanetScale CLI is classified as benign. The skill's purpose is clearly defined as providing command reference and automation for `pscale` operations. The `SKILL.md` and `README.md` files contain no prompt injection attempts, and the shell scripts (`scripts/*.sh`) implement robust input validation (`validate_safe_name` function) to prevent shell injection. All `pscale` commands are executed with arguments passed as discrete tokens, further mitigating injection risks. Credential handling is delegated to the `pscale` CLI or environment variables as intended, with no evidence of unauthorized reading, storage, or exfiltration of sensitive data. The use of `grep -oP` is for parsing `pscale` output, not user input, and is not a vulnerability in this context.