Back to skill
Skillv1.0.0
VirusTotal security
Luke Find Skills · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:16 AM
- Hash
- 58efa8008377b316445570a0d048c2de7ff217842d279ef17fc5e085cd2ee108
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: luke-find-skills Version: 1.0.0 The skill provides instructions for the agent to search for and install third-party packages using the 'npx skills' CLI. It specifically directs the agent to use the '-y' flag to bypass confirmation prompts and the '-g' flag for global installation in SKILL.md. While these capabilities are aligned with the stated purpose of discovering and extending agent functionality, the ability to install and execute arbitrary code from external sources (e.g., skills.sh) is a high-risk capability that could be leveraged for remote code execution if the agent is misdirected.
- External report
- View on VirusTotal