No.0-skill

• Analyzed: May 11, 2026, 9:16 AM
• Findings: 1
• Version: 1.0.1
• Hash: 75c83ddc22760218996c1766fda79384e3f8fe90360ba158b9e087df6f0af9ca
• Source: palm
• External report: View on VirusTotal

Findings (1)

The No.0 Skill bundle is a comprehensive security and safety utility designed to protect AI agents from identity tampering and unauthorized data access. It implements a multi-layered defense system including file integrity monitoring (MD5-based), automated backups/rollbacks, data classification (L1–L6), and a local HTTP-based authorization service with TOTP MFA support. The code is well-structured, uses standard Python libraries for security (cryptography, keyring), and operates entirely within the local filesystem (~/.openclaw/no0/) without external telemetry or data exfiltration. While it includes a 'tamper_simulator.py' that generates risky payloads, this is clearly documented as a testing tool for the guardian's detection capabilities. No malicious intent or harmful prompt injections were identified.