Back to skill
Skillv1.0.0
VirusTotal security
New Agent Setup · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 25, 2026, 6:46 PM
- Hash
- b9013da23553380132432673a86353a8ef428c973960b3ce59d4824a4a031942
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: new-agent-setup Version: 1.0.0 The skill bundle provides instructions for an AI agent to perform high-risk administrative tasks, including modifying the 'openclaw.json' system configuration, handling Discord bot tokens, and establishing persistence via crontab manipulation (Phase 3 in SKILL.md and references/checklist.md). It also involves creating symlinks to OneDrive directories, which could lead to broad file access. While these actions are aligned with the stated purpose of onboarding a new agent, the combination of credential handling, persistence, and system-level configuration changes represents a significant attack surface and high-risk behavior.
- External report
- View on VirusTotal