Full Stack Feature

• Analyzed: May 12, 2026, 3:45 AM
• Findings: 1
• Version: 1.0.0
• Hash: 99a02e92846b2786d78ea5a0f1a91a086c3c64595ef1042b161f5f81bbe3a531
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines a meta-skill for orchestrating a full-stack feature development workflow. The `SKILL.md` content primarily provides instructions for an AI agent on how to manage development stages, invoke internal OpenClaw commands/skills (e.g., `/create-persona`, `/new-feature`), and adhere to best practices, with no evidence of prompt injection for malicious purposes. The `README.md` includes standard installation via `npx clawhub` and local file copies. A non-standard `npx add https://github.com/...` command is present in `README.md`, but it is likely a malformed instruction or a custom tool's command rather than a clear malicious execution vector, and it is not the primary installation method.