Back to skill
Skillv1.0.0

VirusTotal security

Sitemap Generator · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 1:51 PM
Hash
9574f3a5bdbe06f6a8920f022bf93adbe1b7cda0274cc12a44dd625d8098630a
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: cm-sitemap-generator Version: 1.0.0 The script `scripts/sitemap_gen.py` intentionally disables SSL certificate verification by setting `ssl.CERT_NONE` and `check_hostname = False`, which is a security vulnerability that exposes the agent to man-in-the-middle (MITM) attacks during web crawling. While the tool's functionality for BFS crawling and local file scanning aligns with its stated purpose, this intentional bypass of standard security protocols is a significant flaw. No evidence of intentional malice, data exfiltration, or unauthorized execution was found.
External report
View on VirusTotal