strikeradar

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: strikeradar Version: 1.0.0 The OpenClaw skill 'strikeradar' is benign. Its primary function is to fetch and display US-Iran strike probability data from the legitimate API endpoint `https://api.usstrikeradar.com`, as explicitly stated in `SKILL.md` and implemented in `scripts/strikeradar.ts`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's behavior beyond its stated purpose. All commands and instructions align with the skill's described functionality.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If `tsx` is not already installed, running the command may fetch and execute that package through npm.

Why it was flagged

The documented execution path uses `npx tsx` without a pinned version, so running the skill may rely on an external npm-provided runner in addition to the reviewed script.

Skill content
npx tsx {baseDir}/scripts/strikeradar.ts status
Recommendation

Use a trusted or pinned `tsx` installation if you want tighter supply-chain control, and install the skill only from the expected repository.