Back to skill
Skillv1.0.1
VirusTotal security
my_soul_upgrade_skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 30, 2026, 3:16 AM
- Hash
- 3f0c575db0bbe3e7814c21e10b910599d9a6605abc7fd0d4db21a181133d65d6
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: my-soul-upgrade-skill Version: 1.0.1 The skill bundle instructs the agent to modify system-level configuration files and execute an external Python script (~/.openclaw/scripts/build_all_souls.py) that is not included in the package. While the stated purpose of synchronizing 'Soul' templates across agent workspaces is plausible, the reliance on unverified external code execution and broad file system access across the /home/admin/.openclaw/ directory represents a significant security risk without explicit evidence of malicious intent.
- External report
- View on VirusTotal
