Back to skill
Skillv4.0.2
VirusTotal security
Bloom Discovery · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:37 AM
- Hash
- 25cb62b03a6594125650f8a1f829c0aa771be41b697a641648c28ee464c967f1
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: bloom-discovery Version: 4.0.2 The Bloom Discovery skill is a well-architected tool for analyzing agent personality and matching use cases based on user history. While it accesses sensitive data including OpenClaw session logs (~/.openclaw/agents) and USER.md, the implementation follows security best practices, including path traversal guards in 'openclaw-session-reader.ts' and 'user-md-parser.ts'. The code demonstrates a high commitment to privacy by performing analysis locally and applying Local Differential Privacy (LDP) and SHA-256 hashing to data before transmitting derived metadata to 'api.bloomprotocol.ai'. No evidence of raw text exfiltration, credential theft, or unauthorized remote control was found.
- External report
- View on VirusTotal
