Back to skill
Skillv1.1.0

VirusTotal security

oc-doctor · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:42 AM
Hash
ec8b912f0559dd37096f8068bb28b906374b228b3f633ea309ac672c2aa208f9
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: oc-doctor Version: 1.1.0 The skill is a diagnostic utility for OpenClaw that requires high-risk permissions, including reading configuration files containing sensitive API keys (openclaw.json) and executing a bundled shell script (sysinstruction-check.sh). While the logic is consistent with its stated purpose and includes explicit instructions for the AI agent to redact secrets from its output, the broad access to credentials and the use of shell execution for data collection are significant risk factors. No evidence of intentional malice, data exfiltration, or unauthorized network activity was found.
External report
View on VirusTotal