Back to skill
Skillv3.2.0
VirusTotal security
pet-flights · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 27, 2026, 2:56 AM
- Hash
- b4323644b59ce8add66a56ad8fc08b008c5aed9c9f2073957acbff3ecf8e47e0
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: pet-flights Version: 3.2.0 The skill facilitates pet-friendly flight searches by interfacing with a third-party CLI tool. It contains high-risk instructions in SKILL.md and references/fallbacks.md that direct the agent to globally install an NPM package (@fly-ai/flyai-cli), including a fallback to 'sudo' if the initial installation fails. Additionally, it executes shell commands using user-provided parameters and performs local file writes for logging purposes (references/runbook.md). While these behaviors are aligned with the stated travel-search purpose, the automated installation of external software and direct shell execution represent a significant security risk without explicit evidence of malicious intent.
- External report
- View on VirusTotal