Back to skill
Skillv0.0.2
VirusTotal security
webpage-reader-skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:58 AM
- Hash
- 67efb7b54a2480b73d423bf6e35583ac705a894af2b027ee052e696383fcaded
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: webpage-reader-skill Version: 0.0.2 The skill downloads and processes webpage content by executing a headless Chrome browser via the `subprocess` module in `webpage_reader.py`. It includes logic to automatically install Google Chrome using `sudo apt-get` or `sudo dnf` on Linux systems, which represents a high-privilege operation. Furthermore, it executes Chrome with the `--no-sandbox` flag, disabling a primary security layer. While these actions are documented and support the skill's stated purpose, the use of administrative privileges and the reduction of browser security boundaries pose a significant risk to the host environment.
- External report
- View on VirusTotal
