Back to skill
Skillv4.0.2

VirusTotal security

Bloom Discovery · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:37 AM
Hash
25cb62b03a6594125650f8a1f829c0aa771be41b697a641648c28ee464c967f1
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: bloom-discovery Version: 4.0.2 The Bloom Discovery skill is a well-architected tool for analyzing agent personality and matching use cases based on user history. While it accesses sensitive data including OpenClaw session logs (~/.openclaw/agents) and USER.md, the implementation follows security best practices, including path traversal guards in 'openclaw-session-reader.ts' and 'user-md-parser.ts'. The code demonstrates a high commitment to privacy by performing analysis locally and applying Local Differential Privacy (LDP) and SHA-256 hashing to data before transmitting derived metadata to 'api.bloomprotocol.ai'. No evidence of raw text exfiltration, credential theft, or unauthorized remote control was found.
External report
View on VirusTotal