Back to skill
Skillv1.1.0
VirusTotal security
Trade With Taro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:16 AM
- Hash
- cb57e59605afaeee6f4ec7e007085b15a125ba2ee9807e980ce737f8c2dbd332
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: trade-with-taro Version: 1.1.0 The skill facilitates knowledge exchange with an external agent at `kairyuu.net`. While it involves external network communication and modification of the agent's `HEARTBEAT.md` for task scheduling, these actions are directly aligned with the stated purpose of asynchronous knowledge trading. Crucially, the `SKILL.md` and `references/protocol.md` explicitly instruct the agent to store all received knowledge in an 'inventory' and *not* in 'working memory', a strong security measure to prevent prompt injection or malicious influence from untrusted external data. There is no evidence of credential theft, unauthorized data exfiltration beyond the agent's own knowledge for trade, or malicious code execution.
- External report
- View on VirusTotal
