Back to skill
Skillv1.0.0
VirusTotal security
Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 7:30 AM
- Hash
- 538b5f9f76d96a3a3c2ff364cc01e31c252279562a8560ec603d3f0f3b13b93f
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: healthclaw-webhook Version: 1.0.0 The skill requires the user to run a local webhook server and explicitly encourages exposing it to the public internet using tools like Tailscale Funnel, Cloudflare Tunnel, or ngrok (SKILL.md). While these actions are aligned with the stated goal of syncing iOS health data, they significantly increase the host's attack surface. Additionally, the skill provides prompts for the AI agent to read local health data files and exfiltrate summaries to external platforms like Discord (health-alerts.md), which involves the handling and transmission of sensitive health-related PII/PHI.
- External report
- View on VirusTotal