Back to skill
Skillv1.0.0

VirusTotal security

Axi Send File · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 4:11 PM
Hash
5e2eb0cbe975702655665c40e197293ab9a8fcd4e604d1c021f642963db53e57
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: axi-send-file Version: 1.0.0 The skill provides instructions for the agent to convert workspace files into PDF or ZIP formats for delivery via Telegram. While aligned with its stated purpose, it encourages high-risk behaviors in SKILL.md, such as runtime package installation (pip install --break-system-packages mdpdf) and broad shell access to tools like zip and cp. These capabilities could be leveraged for unauthorized data movement or supply chain attacks, though no clear evidence of intentional malice is present.
External report
View on VirusTotal