Back to skill
Skillv1.1.0

VirusTotal security

Trade With Taro · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:16 AM
Hash
cb57e59605afaeee6f4ec7e007085b15a125ba2ee9807e980ce737f8c2dbd332
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: trade-with-taro Version: 1.1.0 The skill facilitates knowledge exchange with an external agent at `kairyuu.net`. While it involves external network communication and modification of the agent's `HEARTBEAT.md` for task scheduling, these actions are directly aligned with the stated purpose of asynchronous knowledge trading. Crucially, the `SKILL.md` and `references/protocol.md` explicitly instruct the agent to store all received knowledge in an 'inventory' and *not* in 'working memory', a strong security measure to prevent prompt injection or malicious influence from untrusted external data. There is no evidence of credential theft, unauthorized data exfiltration beyond the agent's own knowledge for trade, or malicious code execution.
External report
View on VirusTotal