No comparison available
A previous version is required before a diff can be generated.
Security Scan
Status
clean
OpenClaw
gpt-5.5
OpenClaw analysis
This skill is a simple local water and sleep tracker; it runs disclosed Node.js snippets and stores personal logs in one local JSON file.
Confidence: high
VirusTotal
Type: OpenClaw Skill Name: healthcheck Version: 1.0.2 The skill is classified as suspicious due to the potential for prompt/command injection. The `SKILL.md` file instructs the AI agent to execute `node -e` commands that directly embed user input variables (`CUPS`, `NEW_CUPS`) into the JavaScript string. If the OpenClaw platform does not strictly sanitize these variables to numerical values, an attacker could inject arbitrary JavaScript code, leading to unauthorized execution. While there is no explicit malicious intent (like data exfiltration or persistence) within the provided code, this mechanism presents a significant security risk.