Back to skill
Skillv5.3.0
VirusTotal security
Dream Interpreter · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 23, 2026, 10:06 AM
- Hash
- 1499a672632dca1593b0aaa8436cec85b3faddd04cab2e4a601bac4b73c4ab7b
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: dream-interpreter-the Version: 5.3.0 The skill is an elaborate and well-researched dream interpretation engine, but it is classified as suspicious due to instructions in SKILL.md and references/dream-card-design.md that direct the agent to use Playwright (a headless browser automation tool) to render HTML/CSS into images. It also specifies a hardcoded local filesystem path (/home/z/my-project/download/) for saving these files. While these capabilities are plausibly needed for the 'Dream Card' feature, invoking a browser engine to render dynamic content introduces significant security risks, such as local file inclusion (LFI) or server-side request forgery (SSRF), if the rendering process is not strictly sandboxed.
- External report
- View on VirusTotal