Back to skill
Skillv1.0.0
VirusTotal security
agent-manager · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 6:03 AM
- Hash
- 3abebf65d08fe1eb83aabc4c47ef7b829d7caa850f92c4a88bc83dc8edca4aba
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: agent-manager-hxx Version: 1.0.0 The skill bundle automates OpenClaw agent setup and Matrix account management but contains security vulnerabilities. Specifically, `setup_agent.sh` implements a predictable hardcoded password pattern for account registration, and `matrix_register.sh` uses brittle JSON parsing via `sed` (lack of input sanitization). While the scripts' behaviors are aligned with the stated purpose of managing agent lifecycles, the combination of weak authentication defaults and the handling of sensitive Matrix access tokens in plaintext configuration files constitutes a high-risk profile.
- External report
- View on VirusTotal