Back to skill
Skillv1.0.0
VirusTotal security
Metra Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:22 AM
- Hash
- 007a238a46ae3d9ccaa4464a3be350b143f963ed93281ada3cb4f45cb57cef5f
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: metra Version: 1.0.0 The OpenClaw Metra skill is designed to provide real-time Metra transit information. It uses standard Node.js practices, fetches data from official Metra API endpoints over HTTPS, and stores static GTFS data locally in the user's home directory. The `SKILL.md` and `README.md` provide clear, benign instructions for the AI agent and users. The `scripts/metra.mjs` code uses `node:util.parseArgs` for robust command-line argument parsing and `execFileSync` with fixed arguments for `unzip`, mitigating shell injection risks from user input. No evidence of intentional harmful behavior, data exfiltration, persistence, or malicious prompt injection was found.
- External report
- View on VirusTotal