clawd-modifier

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
scripts/patch_binary.py

This script intentionally modifies a local executable's bytes to change visual assets. It is not covertly malicious: no network, no hidden credential theft, and little obfuscation. The primary security concern is operational: in-place binary modification can corrupt executables or be abused by an attacker with local privileges. Use only on verified binaries, keep backups, and consider atomic write patterns and stricter matching safeguards before applying.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 4, 2026, 02:23 AM
Package URL
pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fclawd-modifier%2F@40b543416710dcde833ffbe0000c9f089746625b