Back to skill
Skillv0.1.0
VirusTotal security
Cancel Task · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:00 AM
- Hash
- e409e6329ebaf81e7609252db53840f0e0b2725c6260c64bcdcc2a51fa2e448b
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: cancel-task Version: 0.1.0 The `SKILL.md` file defines `allowed-tools` for Bash commands using overly broad wildcards (e.g., `Bash(npx @openant-ai/cli@latest tasks cancel *)`). This allows the AI agent to append arbitrary commands after the intended `npx` command, creating a severe shell injection vulnerability. While the skill's stated purpose is benign (task cancellation), this configuration flaw could be exploited by a malicious prompt to execute unauthorized commands on the host system.
- External report
- View on VirusTotal