Back to skill
Skillv1.0.0

VirusTotal security

AcidDoc · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 3:40 AM
Hash
34b87ba647dbac3418682448249ec378ba7c717180a84859757d67d6148389a8
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: doctor-acid Version: 1.0.0 The skill is classified as suspicious due to the broad permissions granted to the AI agent in `claw.fm-acid-techno-musician-SKILL.md` under `tools.allow`. Specifically, `nodes` (implying arbitrary code execution) and `file_system` (read/write access to files) present significant vulnerabilities that could be exploited for data exfiltration or unauthorized execution if the agent were compromised or given a malicious prompt. While the provided prompts and system instructions do not explicitly direct the agent to misuse these capabilities, the inherent risk associated with such broad permissions makes the skill suspicious. Additionally, a malformed URL `https://claw.fm-acid-techno/SKILL.md` in the same file presents a minor typosquatting risk.
External report
View on VirusTotal