Back to skill
Skillv1.0.0
VirusTotal security
Daily Market Insight · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:34 AM
- Hash
- 42229197065509cfb1e58c8fc1416530b7bbfd9c92a33c5c0ed14863706a6bf9
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: daily-market-insight Version: 1.0.0 The 'daily-market-insight' skill aims to generate and distribute market reports, which is a benign purpose. However, the SKILL.md file contains a direct instruction for the AI agent to execute a shell command (`git init`). While `git init` itself is not malicious and appears to be a setup step for the `opencode` command, this demonstrates a significant vulnerability where the agent can be instructed to execute arbitrary shell commands via markdown. This capability, if exploited, could lead to remote code execution, making the skill bundle suspicious due to the inherent risk, despite the lack of explicit malicious intent in the provided command.
- External report
- View on VirusTotal