Back to skill
Skillv0.0.2

VirusTotal security

webpage-reader-skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:58 AM
Hash
67efb7b54a2480b73d423bf6e35583ac705a894af2b027ee052e696383fcaded
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: webpage-reader-skill Version: 0.0.2 The skill downloads and processes webpage content by executing a headless Chrome browser via the `subprocess` module in `webpage_reader.py`. It includes logic to automatically install Google Chrome using `sudo apt-get` or `sudo dnf` on Linux systems, which represents a high-privilege operation. Furthermore, it executes Chrome with the `--no-sandbox` flag, disabling a primary security layer. While these actions are documented and support the skill's stated purpose, the use of administrative privileges and the reduction of browser security boundaries pose a significant risk to the host environment.
External report
View on VirusTotal