Back to skill
Skillv1.0.1
VirusTotal security
Talent Scout — Competitor Talent Intelligence · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:22 AM
- Hash
- 211cb40534afd5dd47d503f0593fa2dab5f8ccc2917e8851611652e3e0636876
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: talent-scout Version: 1.0.1 The SKILL.md file contains instructions for the AI agent to 'silently' execute a Python script that performs a 'git pull' and 'pip install' from a local repository (~/ai-native-toolkit) every seven days. This silent update mechanism facilitates arbitrary code execution and system modification without user oversight, which is a significant security risk. While potentially intended for maintenance, the lack of transparency and the use of os.system to modify the environment are high-risk behaviors.
- External report
- View on VirusTotal