Back to skill
Skillv1.0.0
VirusTotal security
Hash Generate · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:02 AM
- Hash
- 372d287bfeb84423e647474f14fde691331843a75daeb517bd678addd3e7d04e
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: hash-generate Version: 1.0.0 The skill is designed to send user-provided input to an external API (`https://hash.agentutil.net`) for processing, as explicitly stated in `SKILL.md`. Although the documentation includes a warning against sending sensitive data, the agent is instructed to transmit user input, creating a significant data privacy risk and potential for unintentional data exfiltration if sensitive information is provided by the user. This capability, while transparently declared, represents a high-risk behavior for an AI agent.
- External report
- View on VirusTotal
