Back to skill
Skillv1.0.0
VirusTotal security
Key Rotation Planner · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 11:46 PM
- Hash
- 38125f8352b723566358681c012b624778b691c8b7bbf86a044831750b62e454
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: key-rotation-planner Version: 1.0.0 The 'key-rotation-planner' skill bundle performs high-risk discovery actions, including searching the local filesystem for hardcoded secrets using `ripgrep` and querying AWS Secrets Manager and HashiCorp Vault for credential metadata (`SKILL.md`). While these capabilities are aligned with the stated purpose of managing key rotations, the broad access to sensitive credentials and the potential for exposing raw secret values to the AI agent's context categorize it as suspicious. No evidence of intentional malice, data exfiltration, or unauthorized remote execution was found.
- External report
- View on VirusTotal