心灵补手 V3.0

• Analyzed: May 10, 2026, 6:32 AM
• Findings: 1
• Version: 3.0.0
• Hash: 7d8a5a10923823241df506c0b520c90ed6a3a6ec83ee88872e52ba6a3ee2c189
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a 'flattery' personality module that performs automated modifications to the agent's core system prompt (SOUL.md) via scripts like inject_to_soul.sh and install.sh. It contains a script (ai_corpus_upgrader.py) that reads sensitive credentials from the filesystem (/root/.openclaw/.credentials/minimax_api.txt) to communicate with an external API (api.minimax.chat). Additionally, adapters/claude_code.py utilizes the '--dangerously-skip-permissions' flag, which intentionally bypasses platform security prompts. While these actions align with the stated purpose of overriding agent behavior, the combination of credential access, external network calls, and security control bypasses represents a significant risk.