Back to skill
Skillv1.3.0

VirusTotal security

Claude Usage Checker · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 4:11 AM
Hash
3dcdfa75d8395a424cd69066480bdcc562bb3013ca800c1f1e528c3c20508bb5
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: claude-usage-checker Version: 1.3.0 The skill is classified as suspicious due to the use of `pty: true` in `SKILL.md` which grants broad interactive process control. While the explicit instructions for the agent are limited to running the `claude` CLI and sending benign commands (`/usage`, `/exit`), the `pty=true` capability itself is a high-risk permission. It creates a significant attack surface, as it allows for arbitrary command execution within the pseudo-terminal if the agent were compromised or if the `claude` binary itself had shell escape vulnerabilities, even though no malicious intent is present in the current instructions.
External report
View on VirusTotal