Back to skill
Skillv1.0.0
VirusTotal security
Prepublish Privacy Scrub · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:00 AM
- Hash
- bcdad3129c1f57ed204f73b5cd5acc3e4309595562130a0de7fe89f716361cab
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: prepublish-privacy-scrub Version: 1.0.0 The skill is classified as suspicious due to critical vulnerabilities in its implementation. The `Invoke-PrivacyScrub` function in `SKILL.md` directly overwrites files without creating a backup, contradicting the explicit 'Original files backed up before scrub' claim in the 'Privacy/Safety' section. This poses a significant risk of irreversible data loss. Additionally, the scrubbing function applies to all file types, not just text-based ones, increasing the potential for file corruption. While the stated purpose is benign and there is no evidence of intentional malicious behavior like data exfiltration or unauthorized execution, these severe flaws make the skill dangerous to use.
- External report
- View on VirusTotal