Back to skill
Skillv1.0.0

VirusTotal security

股票分析 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 28, 2026, 6:00 AM
Hash
6fdf7dce0eb4ae9f263620f1d7b2cf74e9cdd00a1c173265ed00e0b0d8b48476
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: stock-analyst Version: 1.0.0 The skill instructions in SKILL.md require the agent to start a local Python HTTP server and use a browser to render HTML files from the 'D:\Downloads\' directory to generate PDF reports. While these actions are framed as part of the report generation process, programmatically launching network services and browser sessions on local files introduces significant security risks, such as potential local file exposure or serving as a network pivot, which warrants a suspicious classification despite the lack of clear malicious intent.
External report
View on VirusTotal