Back to skill
Skillv0.1.0
VirusTotal security
Howtoletmyagent Installer · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 24, 2026, 10:46 PM
- Hash
- dff70019e70faa583acd767f75e90b3611cdf0a86c29befd0fd490dd850fbc32
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: howtoletmyagent-installer Version: 0.1.0 The skill functions as a remote installer that fetches manifests from 'howtoletmyagent.xyz' and executes commands or writes files to the local system. While SKILL.md includes safety instructions such as domain verification and requiring user approval before execution, the core logic of running arbitrary 'install commands' provided by a remote JSON manifest is a high-risk behavior that could lead to Remote Code Execution (RCE) if the source domain is compromised or serves malicious content.
- External report
- View on VirusTotal