Back to skill
Skillv0.1.1

VirusTotal security

Claw Problem Diagnoser · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 3:46 AM
Hash
025ea05057f7c69af8b6e3cb9f656fafe50e53ce24fabafa037dea801a186385
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: claw-problem-diagnoser Version: 0.1.1 The skill is classified as suspicious primarily due to the use of `subprocess.run` with `shell=True` in `claw_problem_diagnoser.py` within the `PermissionsCheck.fix` method. While the file paths being modified are currently hardcoded, this coding pattern is a significant vulnerability (shell injection risk) that could lead to Remote Code Execution if the paths were to become dynamically generated or user-controlled in future versions. The skill also performs other high-risk system operations like installing dependencies and starting services, which are aligned with its stated purpose but require careful scrutiny. There is no evidence of intentional malicious behavior such as data exfiltration or backdoor installation.
External report
View on VirusTotal