TOSR Test Skill For Delete

• Analyzed: May 6, 2026, 6:56 AM
• Findings: 0
• Version: 0.1.0
• Hash: 14afc7bb86856b5be619bd39905b98c8eb88439138b6665f52495c253ce8478a
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: tosr-test-skill-1778050466 Version: 0.1.0 The skill bundle consists of metadata and documentation (SKILL.md and _meta.json) indicating it is a placeholder for automated integration testing of the clawhub API. It contains no executable code, network requests, or instructions that would lead to malicious behavior or data exfiltration.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

If an agent follows these instructions with valid Clawhub access, it could create, update, or delete the named test skill.

Why it was flagged

The skill explicitly documents mutating API operations. This is purpose-aligned for a lifecycle test and appears scoped to the test skill, but users should notice that following it with valid access could change registry state.

Skill content

This skill validates the following operations against the real clawhub API: ... Publish ... Update ... Delete — Removes the skill via DELETE /api/v1/skills/{slug}

Recommendation

Only run this in the intended test context, verify the slug before any delete or update action, and avoid granting broader account permissions than needed.