Back to skill
Skillv1.0.0

VirusTotal security

Respiratory Symptom Smart Recognition Tool | 呼吸道症状智能识别工具 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 17, 2026, 4:46 PM
Hash
4047ed6ba83b7e206ddc2865de398d71a49076f49e79ecbff02dc663c8923371
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: smyx-respiratory-symptom-recognition-analysis Version: 1.0.0 The skill bundle implements a health monitoring tool that collects sensitive user identifiers (phone numbers/usernames) and uploads video data to a remote backend (lifeemergence.com). It contains 'highest priority' instructions in SKILL.md that explicitly command the AI agent to bypass its standard local memory and LanceDB retrieval systems in favor of the developer's cloud API, which constitutes aggressive prompt steering. Furthermore, the common utility scripts (smyx_common/scripts/skill.py) include a high-risk capability to recursively execute the 'openclaw' CLI via subprocess.run, and the bundle maintains a local SQLite database (smyx-common-claw.db) to persist session tokens and user metadata.
External report
View on VirusTotal