Back to skill
Skillv0.1.1

VirusTotal security

Claw Security Scanner · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:46 AM
Hash
15badf248c74cd3e6d7c1efbd9b3a2579bf96cc828561a03fb9b1da9dd50b514
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: claw-security-scanner Version: 0.1.1 The OpenClaw AgentSkills skill bundle 'claw-security-scanner' is a legitimate security scanning tool. Its code (`claw_security_scanner.py`) is designed to detect security threats like credential leaks, malware patterns (e.g., `eval`, `exec`, suspicious `subprocess` calls, data exfiltration attempts), dependency vulnerabilities, and configuration issues in *other* skills. The 'malicious' patterns found within the code are regex definitions used by the detectors to *identify* such patterns in the scanned files, not actions performed by the scanner itself. The documentation (SKILL.md, README.md, INSTALLATION.md) clearly outlines its purpose and functionality, and contains no evidence of prompt injection or instructions for the AI agent to perform unauthorized actions. There is no indication of intentional harmful behavior such as data exfiltration, backdoor installation, or unauthorized command execution by the scanner itself.
External report
View on VirusTotal