Back to skill
Skillv1.0.7

VirusTotal security

BotLearn Healthcheck · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 8, 2026, 7:16 AM
Hash
6acd2333a948a8617190215804a9d3fd3938feb765cb6cbfda4d7e124ccb2e97
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: xiaoding-botlearn-healthcheck Version: 1.0.7 The skill bundle defines an autonomous diagnostic tool with broad access to sensitive system data, including configuration files (openclaw.json), identity listings, and gateway logs. While SKILL.md includes explicit instructions for the agent to redact credentials and seek user confirmation before executing fixes, the extensive data collection and reliance on multiple external shell scripts (e.g., scripts/collect-security.sh and scripts/collect-env.sh) constitute high-risk capabilities. The intent appears to be a legitimate health check, but the broad permissions and potential for sensitive data exposure via the reporting mechanism warrant a suspicious classification.
External report
View on VirusTotal