Back to skill
Skillv1.0.0
VirusTotal security
Auto Updater Andy27725 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 24, 2026, 4:01 PM
- Hash
- 908c1c75e262a5a634ffd9ab074b98957f3384e9693f1d44f766e9167a57be51
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: auto-updater-andy27725 Version: 1.0.0 The skill automates system-wide updates for the Clawdbot core and all installed skills by scheduling a recurring cron job that executes high-privilege shell commands (e.g., 'npm update -g', 'clawdbot update'). While the behavior is clearly aligned with the stated purpose and includes transparent reporting requirements, the capability to modify the core application logic and maintain persistence via cron represents a significant risk. The implementation details in SKILL.md and references/agent-guide.md provide the agent with the necessary instructions to perform these administrative tasks without manual oversight.
- External report
- View on VirusTotal