Openclaw Rappi

• Analyzed: May 13, 2026, 7:26 PM
• Findings: 1
• Version: 0.1.1
• Hash: d8a8b35e1da2b1b086b2cfc346fa5c89c91e69f5e2a8110914141fe129d5bca8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill includes a bootstrap script in SKILL.md that automatically clones a third-party repository (github.com/zarruk/openclaw-rappi.git), executes 'npm install', and establishes persistence via launchd or background processes. While the skill defines strict safety protocols for financial transactions (requiring explicit user approval for purchases), the 'curl|bash' style installation pattern and the requirement to run Chrome with remote debugging enabled (port 9222) are high-risk behaviors that could be leveraged for supply-chain attacks or unauthorized local execution.