Back to skill
Skillv1.0.7
VirusTotal security
Gateway Guard · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 4:02 AM
- Hash
- 5a9438a232e4f1eb53174593327c6a82bf31204e55e68842085581031821eb49
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: gateway-guard Version: 1.0.7 The 'gateway-guard' skill performs high-risk system operations including modifying the 'openclaw.json' configuration file (which contains authentication secrets), inspecting process command lines via 'ps' to extract credentials, and installing persistence on macOS via a LaunchAgent (scripts/install_watcher.sh). While these actions are documented as part of its purpose to maintain gateway authentication consistency and monitor logs for errors, the combination of configuration tampering, process inspection, and persistence mechanisms constitutes a significant security risk and broad permissions beyond typical benign behavior.
- External report
- View on VirusTotal