Workspace Analyzer

• Analyzed: May 12, 2026, 4:29 AM
• Findings: 1
• Version: 1.1.0
• Hash: bd56170829ec51a745fd41eb06c9ac98b18bfe649b61db039ded97c47d8ef790
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle is classified as benign. The `SKILL.md` clearly outlines the purpose of analyzing the workspace and providing recommendations for an AI agent to act upon. Crucially, the `scripts/analyzer.py` Python code is strictly read-only, performing file system traversal and content analysis without any write operations, network calls, or external command execution. This aligns with the 'Safety & Security' claims in `SKILL.md` ('Read-Only', 'No Secrets', 'Safe Output'). While `SKILL.md` includes 'Fix Instructions for Agents' involving `git add -A` and `git commit`, these are instructions for the AI agent to perform *after* reviewing the analysis, not actions executed by the provided script itself. There is no evidence of intentional harmful behavior such as data exfiltration, backdoors, or unauthorized remote control.