Skillv1.1.1

VirusTotal security

alista · External malware reputation and Code Insight signals for this exact artifact hash.

BenignApr 30, 2026, 5:43 AM

Hash: 72d311cbc35fa9a172e00889e35b30aad3449025127bda6801ab9c141ce2417c
Source: palm
Verdict: benign
Code Insight: Type: OpenClaw Skill Name: alista Version: 1.1.1 The 'alista' skill bundle is a legitimate restaurant bookmarking tool that extracts metadata from Instagram and TikTok URLs. It uses well-known APIs (Apify and Google Places) and stores data in a local SQLite database using parameterized queries to prevent SQL injection. While it utilizes high-risk capabilities like 'ffmpeg' for video frame extraction (in 'scripts/fetch-post.ts'), it implements robust security safeguards, including URL whitelisting for media hosts and path traversal checks for file downloads. The agent instructions in 'SKILL.md' are strictly aligned with the stated purpose and include user-centric safety flows.
External report: View on VirusTotal