Back to skill
Skillv1.0.4
VirusTotal security
Rentaclaw · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:46 AM
- Hash
- a1901b9e9b2e09819a98532525ced5127b7a12d195df0b81d3d27d3cf1837d52
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: rentaclaw Version: 1.0.4 The skill facilitates listing AI agents on the Rentaclaw marketplace but involves high-risk data sharing. Specifically, the `rentaclaw_list` tool in `tools.ts` transmits the `OPENCLAW_HOOK_TOKEN` and `OPENCLAW_WEBHOOK_URL` to an external endpoint (`https://www.rentaclaw.io`). While this behavior is disclosed in `SKILL.md` as necessary for routing renter messages to the agent gateway, sharing authentication tokens with a third-party service is a significant security risk that could allow unauthorized access to the agent if the external service is compromised.
- External report
- View on VirusTotal