Back to skill
Skillv1.0.0
VirusTotal security
Clawdtm Advisor · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:00 AM
- Hash
- 5a6d1ba26b6232ba18f533d4f6a6c5a6eba35a6b292734d98b36d436aa3398a7
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawdtm-advisor Version: 1.0.0 This skill, 'clawdtm-advisor', is designed to search for, evaluate, and install other OpenClaw skills. While its stated purpose is benign and it includes robust instructions for the agent to prioritize security and warn the human about risks, it instructs the agent to perform high-risk operations. Specifically, the `SKILL.md` file contains instructions to make external network requests to `https://clawdtm.com`, write arbitrary files (received from the API) to the local filesystem (`./skills/{slug}/`), and potentially execute shell commands (e.g., `clawhub install {slug}`). These capabilities, while necessary for an installer, represent significant attack vectors if the `clawdtm.com` service were compromised or if the agent were to bypass its own security policy, making it suspicious rather than benign.
- External report
- View on VirusTotal