Back to skill
Skillv1.0.0
VirusTotal security
Aagent System · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:32 AM
- Hash
- 83d9bf04dc1e462b8521f6fa33a23992a9dfd8f5b06a696c18c5269e57d533a7
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: aagent-system Version: 1.0.0 The AAgent System is a complex multi-process crawler designed to collect and scan npm packages for security research. While its stated purpose is benign, it exhibits high-risk behavior by attempting to execute multiple external shell scripts located in the user's home directory (e.g., `~/aass-scripts/3layer_scheduler.sh`, `~/aass-scripts/daily_intel.sh`, and `~/aass-dataset/secure_dataset.sh`) within `agents/analyzer/agent.cjs`, `agents/researcher/agent.cjs`, and `agents/scanner/agent.cjs`. Furthermore, the system is designed to be highly aggressive, with `agents/evolver/agent.cjs` and `agents/orchestrator/agent.cjs` capable of dynamically spawning and managing dozens of background processes. The reliance on unvetted external scripts in the home directory is a significant security risk.
- External report
- View on VirusTotal