Back to skill
Skillv1.0.0

VirusTotal security

All Documents QA · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 27, 2026, 4:42 AM
Hash
8e87b2530866be8f02ecb1d2c17da7ad3d42b1457b01f9ac64a3cbf37490cef3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: document-qa Version: 1.0.0 The OpenClaw AgentSkills bundle for 'document-qa' is classified as benign. All scripts (extract_docx.py, extract_excel.py, extract_txt.py, process_folder.py, run_qa.py) correctly implement their stated purpose of extracting text from various document types. The use of `subprocess.run` in `process_folder.py` and `run_qa.py` is secure, passing arguments as a list to `sys.executable`, which prevents shell injection vulnerabilities. The `SKILL.md` and `run_qa.py` provide clear, non-malicious instructions and context to the AI agent, aligning with the skill's function without attempting prompt injection for unauthorized actions or data exfiltration. There is no evidence of malicious intent, obfuscation, or attempts to access sensitive system resources beyond the scope of document processing.
External report
View on VirusTotal