Back to skill
Skillv1.0.0
VirusTotal security
Sure API · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 8:26 AM
- Hash
- a7f1250e67349c66329881bc9c8d847400dd6d3b51b1806810f4c9268542314b
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: sure-api Version: 1.0.0 The skill bundle is a well-structured API client for the 'Sure' financial platform. It provides a Node.js CLI (sure_api_cli.js) and Bash wrappers (sure_api_request.sh) to interact with accounts, transactions, and holdings. Security features include a mandatory safety gate (--yes flag) for write operations and the use of a dedicated secure environment file for API keys. While it includes a self-update script (sure_openapi_update.sh) that fetches a remote OpenAPI specification from GitHub, the downloaded content is processed by a safe, regex-based parser (sure_openapi_summarize.js) rather than being executed or evaluated, posing no significant risk of remote code execution.
- External report
- View on VirusTotal