Back to skill
Skillv1.0.0

VirusTotal security

markdown-extract · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:00 AM
Hash
c0c0874a32e12a9d1009e3cfb6309909bd588a572c297ddd817686f7d8d6a584
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: markdown-extract Version: 1.0.0 The skill's code and documentation are benign. The `SKILL.md` file provides clear, non-malicious instructions for using the skill. The `extract.py` script correctly uses `subprocess.run` with a list of arguments for `curl`, which prevents shell injection vulnerabilities from user-controlled input. The skill's functionality is limited to making HTTP requests to the `https://markdown.new/` API, as described, and does not attempt to access sensitive local data, exfiltrate information, or establish persistence. While the skill relies on an external API, its own implementation does not introduce vulnerabilities or malicious behavior.
External report
View on VirusTotal