full scale openclaw skill auditor

• Analyzed: May 15, 2026, 5:57 AM
• Findings: 1
• Version: 1.0.0
• Hash: 05a5dabc32181ec6ea3a27a1b649c2b897b6b08b7a35fcda6d7f006b8ea70d18
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool designed to audit other AI skills for safety, efficiency, and best practices. It uses a bash script (scripts/clone_and_extract.sh) to safely clone GitHub repositories and a Python script (scripts/analyze_tokens.py) to estimate token usage without executing untrusted code from the target repositories. While it references an external directory (../post-generator/) for social media post generation, its operations are transparent, well-documented, and lack any indicators of malicious intent or data exfiltration.