batch-git-url-replace

• Verdict: Pass
• Analyzed: May 11, 2026, 7:24 AM
• Findings: 0
• Version: 1.0.0
• Hash: e4cbf8cffc2197d0f1faf8b6292650f35029272f613156d94fd85e15e1f9c0f8
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: batch-git-url-replace Version: 1.0.0 The skill provides PowerShell and Bash scripts to automate the batch replacement of Git remote URLs in a specified directory. The logic in SKILL.md is transparent, aligns with the stated purpose of migrating Git repositories, and uses standard system commands (find, sed, Get-ChildItem) without any evidence of malicious intent, data exfiltration, or obfuscation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

A broad scan directory or unusual URL text could update more repositories than intended or produce incorrect Git remote URLs.

Why it was flagged

The Linux workflow recursively finds Git repositories under the user-provided directory and directly edits their config files. This is aligned with the skill purpose, but it is a broad shell-based bulk modification and the sed expression may behave unexpectedly if URL values contain special sed characters.

Skill content

find "$SCAN_DIR" -name ".git" -type d ... sed -i "s|${OLD_URL}|${NEW_URL}|g" "$config"

Recommendation

Run it first on a small test directory, consider backing up repositories or .git/config files, and verify results with git remote -v before using it broadly.