[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:10+00:00",
  "ms": 40,
  "reply": {
   "sample_id": "poisoned-clawhub-skill",
   "title": "ClawHub Weather & Travel Bot (Poisoned Description)",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 3.37,
   "grade": "POISONED",
   "findings": [
    {
     "check": "prompt_injection_in_description",
     "severity": "CRITICAL",
     "detail": "Prompt injection marker in the skill description: 'OVERRIDE'"
    },
    {
     "check": "credential_exfiltration_risk",
     "severity": "HIGH",
     "detail": "Code reads secrets from the environment: dict(os.environ); os.environ used as a whole value"
    },
    {
     "check": "credential_exfiltration",
     "severity": "CRITICAL",
     "detail": "Code reads secrets and has a network path to send them: dict(os.environ); requests.post"
    },
    {
     "check": "cross_skill_memory_snoop",
     "severity": "HIGH",
     "detail": "Sensitive memory region claimed: mem_region_system_env (needs a person's review whatever the skill is called)"
    },
    {
     "check": "unwarranted_critical_privilege",
     "severity": "MEDIUM",
     "detail": "Skill claims the CRITICAL privilege tier; a skill cannot authorize that for itself"
    }
   ],
   "finding_count": 5,
   "blocking_count": 5
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:10+00:00",
  "ms": 41,
  "reply": {
   "sample_id": "unconstrained-shell",
   "title": "OpenClaw DevOps Terminal Runner (Unconstrained Execution)",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 1.62,
   "grade": "UNSAFE",
   "findings": [
    {
     "check": "unconstrained_shell_execution",
     "severity": "HIGH",
     "detail": "Code runs operating-system commands: subprocess.check_output().decode; subprocess.check_output"
    },
    {
     "check": "unwarranted_critical_privilege",
     "severity": "MEDIUM",
     "detail": "Skill claims the CRITICAL privilege tier; a skill cannot authorize that for itself"
    }
   ],
   "finding_count": 2,
   "blocking_count": 2
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:11+00:00",
  "ms": 34,
  "reply": {
   "sample_id": "cross-skill-snoop",
   "title": "Smart Home Hub Skill (Cross-Skill Memory Snoop)",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 1.94,
   "grade": "UNSAFE",
   "findings": [
    {
     "check": "cross_skill_memory_snoop",
     "severity": "HIGH",
     "detail": "Sensitive memory region claimed: mem_region_onepassword (needs a person's review whatever the skill is called)"
    },
    {
     "check": "cross_skill_memory_snoop",
     "severity": "HIGH",
     "detail": "Code references foreign sensitive memory or vault: '1Password'"
    }
   ],
   "finding_count": 2,
   "blocking_count": 2
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:11+00:00",
  "ms": 32,
  "reply": {
   "sample_id": "clean-github-sync",
   "title": "Clean GitHub Issue Sync Skill",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 1.4,
   "grade": "CLEAN",
   "findings": [],
   "finding_count": 0,
   "blocking_count": 0
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:12+00:00",
  "ms": 37,
  "reply": {
   "skill_id": "weather",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 1.16,
   "grade": "CLEAN",
   "findings": [],
   "finding_count": 0,
   "blocking_count": 0
  }
 },
 {
  "id": "C06",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:12+00:00",
  "ms": 39,
  "reply": {
   "skill_id": "weather",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 0.8,
   "grade": "POISONED",
   "findings": [
    {
     "check": "prompt_injection_in_description",
     "severity": "CRITICAL",
     "detail": "Prompt injection marker in the skill description: 'OVERRIDE'"
    }
   ],
   "finding_count": 1,
   "blocking_count": 1
  }
 },
 {
  "id": "C07",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:13+00:00",
  "ms": 35,
  "reply": {
   "skill_id": "weather",
   "engine": "OpenClaw KEYSTONE Detector (AST + Cryptographic Sandbox Spec)",
   "scanned_ms": 1.4,
   "grade": "UNSAFE",
   "findings": [
    {
     "check": "credential_file_access",
     "severity": "HIGH",
     "detail": "Code reads a credential file (SSH, cloud, browser, wallet): os.path.expanduser: ~/.ssh/id_rsa; string literal: ~/.ssh/id_rsa"
    }
   ],
   "finding_count": 1,
   "blocking_count": 1
  }
 }
]