Back to skill
Skillv1.0.0

VirusTotal security

Expanso secrets-scan · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:43 AM
Hash
5830d872efba0875f52cc4f79b58ecbf662f747e4ff07959925d161092e50a66
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: expanso-secrets-scan Version: 1.0.0 The skill is designed to detect hardcoded secrets using an OpenAI LLM, as described in `SKILL.md` and `README.md`. It utilizes environment variables for configuration (`OPENAI_API_KEY`, `SECRET_TYPES`) and processes input via CLI or an HTTP server, sending it to the OpenAI API for analysis. All code and documentation align with the stated purpose, and there is no evidence of intentional harmful behavior, data exfiltration beyond the OpenAI API call for its core function, malicious execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent itself.
External report
View on VirusTotal