Back to skill
Skillv1.0.7
VirusTotal security
BotLearn Healthcheck · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 8, 2026, 7:16 AM
- Hash
- 6acd2333a948a8617190215804a9d3fd3938feb765cb6cbfda4d7e124ccb2e97
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: xiaoding-botlearn-healthcheck Version: 1.0.7 The skill bundle defines an autonomous diagnostic tool with broad access to sensitive system data, including configuration files (openclaw.json), identity listings, and gateway logs. While SKILL.md includes explicit instructions for the agent to redact credentials and seek user confirmation before executing fixes, the extensive data collection and reliance on multiple external shell scripts (e.g., scripts/collect-security.sh and scripts/collect-env.sh) constitute high-risk capabilities. The intent appears to be a legitimate health check, but the broad permissions and potential for sensitive data exposure via the reporting mechanism warrant a suspicious classification.
- External report
- View on VirusTotal
