Back to skill
Skillv1.0.0
VirusTotal security
Task Protection · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:25 AM
- Hash
- 6e458b5387bc7ed1e4ef2d03d58cbf8a5916d2c30b51ca7cffc96c3f71d7abff
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: task-protection Version: 1.0.0 The skill bundle provides a comprehensive framework for task lifecycle management, including logging, failure analysis, and reporting. It is classified as suspicious primarily due to the presence of a hardcoded API key (TAVILY_API_KEY) in 'scripts/daily-news.sh', which represents a significant credential exposure vulnerability. Additionally, the bundle includes scripts ('scripts/system-health-check.sh' and 'scripts/daily-news.sh') that perform broad system monitoring and external network requests; while these actions are consistent with the stated purpose, they represent a high-privilege attack surface if misused.
- External report
- View on VirusTotal