Back to skill
Skillv1.0.0

VirusTotal security

Deaddrop · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 3:35 AM
Hash
4ef999534d84ba7ef088050ddbac8826625d04fc824cd69351e68cb103ac93d5
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: deaddrop Version: 1.0.0 The skill is classified as suspicious due to instructions in `SKILL.md` that direct the AI agent to set up an OpenClaw cron job for regular inbox polling using `curl`. While the stated purpose of this cron job is benign (checking its own messages), the instruction to establish persistence via a scheduled task is a high-risk capability that could be leveraged for malicious purposes if the agent were given different instructions. There is no clear evidence of intentional harmful behavior like data exfiltration or unauthorized remote control in the provided content, but the capability itself is noteworthy.
External report
View on VirusTotal