Back to skill
Skillv1.0.0
VirusTotal security
Indian Stock Monitor Clawhub · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 1:20 PM
- Hash
- 6174ddcd58bc25f5fd6ed8fe2418a3d7ccc8f85f994b0b861fa66609c744024d
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: indian-stock-monitor Version: 1.0.0 The skill requests high-privilege permissions, specifically 'mcp__workspace__bash' and 'mcp__scheduled-tasks__create_scheduled_task' (documented in SKILL.md and manifest.json), which grant the agent capabilities for arbitrary shell execution and persistence. While these tools are plausibly intended to facilitate the automated daily monitoring of Indian stocks, the inclusion of a general-purpose bash tool without a strictly defined or restricted scope in the instructions represents a significant attack surface. No evidence of intentional malice, such as data exfiltration or hidden payloads, was found in the logic.
- External report
- View on VirusTotal