Back to skill
Skillv1.0.0
VirusTotal security
ddday · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousMar 31, 2026, 3:56 AM
- Hash
- 8800b149779a0f1762064282876ce9bc3ccef7b524f6ffc89596ea56da4bfb63
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: ddday Version: 1.0.0 The ddday skill (SKILL.md) functions as a work journal and migration toolkit that explicitly instructs the AI agent to collect sensitive information, including credential files, .env keys, and Claude project memory, into a migration bundle. While these capabilities are consistent with the stated goal of machine migration, the broad access to secrets and the automated modification of system configurations (crontab, dependency installation) represent significant security risks. No evidence of unauthorized remote exfiltration was found, but the tool's design facilitates the aggregation of highly sensitive data.
- External report
- View on VirusTotal