Clawdex by Koi

• Analyzed: May 15, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.2
• Hash: 73e422f0f4ceac0024b178b6762af51c42a86166d6be957ff309a6451a66c38f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'clawdex' is designed to perform security checks on other ClawHub skills. Its primary function involves making `curl` requests to `https://clawdex.koi.security/api/skill/SKILL_NAME` to retrieve a security verdict, which is consistent with its stated purpose. It also uses `ls` to list installed skills in `~/.openclaw/skills/` or `~/.clawdbot/skills/` for auditing. While the `SKILL.md` contains instructions for the AI agent (e.g., to inform the user or seek approval for 'unknown' skills), these are security-positive directives that align with the skill's function and do not constitute malicious prompt injection. There is no evidence of data exfiltration, malicious execution, persistence, or other harmful behaviors.