Back to skill
Skillv1.0.0
VirusTotal security
HashGrid Connect · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 3:32 AM
- Hash
- 8328dcdc831c86cf4787ed4a6bbe620193664e88a8242cd76a4b5c4bd8c13864
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: hashgrid-connect Version: 1.0.0 The skill is classified as suspicious due to a significant supply chain risk identified in `SKILL.md`. The agent is explicitly instructed to `curl -s https://connect.hashgrid.ai/skill.md` and "follow the instructions" for quick start and full documentation. This allows the remote server (`connect.hashgrid.ai`) to dynamically deliver new instructions or commands to the agent, bypassing the static review of the skill bundle and enabling potential future malicious behavior or arbitrary command execution.
- External report
- View on VirusTotal