Back to skill
Skillv0.1.9
VirusTotal security
Plan I · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:57 AM
- Hash
- 634907c5e63aa4a7929a1af3b1984f629bd8875d4bf0a9247b0cea47bdd789aa
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: plan-i Version: 0.1.9 The skill bundle is designed to initialize project planning documents by executing a bash script (scripts/pl-init.sh) that creates a directory and a template markdown file. The script contains a potential path traversal vulnerability because it uses the user-provided plan name directly in a file path without validation. Although the SKILL.md instructions direct the AI to sanitize the input, the lack of script-side validation is a security flaw, warranting a suspicious classification per the provided guidelines regarding vulnerabilities.
- External report
- View on VirusTotal