Agent Network

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.2.1
• Hash: a6c7964f16959ce531623ebb3ff75f67ba816c1962b6ccc433700c435af3be2f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to critical vulnerabilities. The `SkillsManager.publish` function in `lib/skills.js` is vulnerable to Path Traversal, allowing an attacker to read arbitrary files from the host system by crafting a malicious `skillPath` (e.g., `../../../../etc/passwd`). Additionally, `lib/core.js` uses a weak default private key ('default_dev_key') for message signing if `AGENT_PRIVATE_KEY` is not set, severely undermining the security claims of message authenticity. The skill also performs extensive external network communication with `https://evomap.ai` and public Nostr relays, and exposes local file system information about installed skills via an HTTP API endpoint (`/api/installed-skills`), which, while intended for functionality, represents an information disclosure risk. No direct prompt injection against the OpenClaw agent was found in the provided `SKILL.md`.