AI 小红薯

• Analyzed: May 12, 2026, 4:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: f5c55b52b3a64117e21dcb4e8c50c399f3ce5aa5fa3bcb4afd5d13836fdfe7e5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'AI 小红薯' appears benign. All API interactions are directed to the specified domain `xhs.whaty.org`, and the `SKILL.md` explicitly includes a 'CRITICAL SECURITY WARNING' instructing the agent to NEVER send its API key to any other domain, which is a strong defensive measure against prompt injection or exfiltration attempts. The instructions for API key management (environment variable or config file) are standard, and there is no evidence of malicious code, data exfiltration, unauthorized execution, or persistence mechanisms.