Back to skill
Skillv1.0.0
VirusTotal security
Chen Find Skills · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousMar 22, 2026, 3:46 PM
- Hash
- 440266811ccda9aa5d2a67e28d0e366f97bfe024b99ff5d687692e9a05fc6e4a
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: chen-find-skills Version: 1.0.0 The skill 'chen-find-skills' provides instructions for an AI agent to search for and install third-party software using the `npx skills` CLI. It explicitly directs the agent to use high-risk commands such as `npx skills add <package> -g -y`, which installs packages globally and bypasses user confirmation prompts. While these capabilities are aligned with the skill's stated purpose of managing agent extensions, the facilitation of unverified code execution from external repositories (like GitHub) via shell commands in `SKILL.md` presents a significant security risk without built-in safeguards.
- External report
- View on VirusTotal