Back to skill
Skillv1.0.0

VirusTotal security

VibeTunnel · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 3:06 AM
Hash
1ddc924e9ce9d577b9af9619d659345a7be3c4baae277656d1dccc63875a870a
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: vibetunnel Version: 1.0.0 The skill exposes high-risk capabilities by allowing the creation of new terminal sessions with arbitrary commands and sending arbitrary input to existing sessions via the VibeTunnel API, as detailed in SKILL.md. While this functionality is central to the skill's stated purpose of managing terminal sessions, it presents a significant risk for arbitrary code execution if the agent is prompted maliciously. There is no direct evidence of intentional malicious behavior such as data exfiltration or persistence within the skill's definition itself.
External report
View on VirusTotal