Back to skill
Skillv1.0.2

VirusTotal security

Trackyard · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:11 AM
Hash
1ebbced00657deff0d1c22349000b5b3406e1fd8b5ddef750b95dc0c40de34e1
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: trackyard Version: 1.0.2 The OpenClaw skill bundle is benign. The `SKILL.md` provides clear, non-malicious instructions for the AI agent and users, without any prompt injection attempts. The `scripts/trackyard.sh` script correctly uses `curl` and `jq` as declared in the metadata, handles the `TRACKYARD_API_KEY` securely for authentication to `api.trackyard.com`, and constructs API requests safely using `jq` to prevent shell injection. Filename sanitization is also implemented when downloading tracks. There is no evidence of data exfiltration, persistence mechanisms, or other malicious behaviors.
External report
View on VirusTotal