Everclaw — Inference You Own

Security checks across static analysis, malware telemetry, and agentic risk

Overview

No artifact-backed suspicious behavior could be confirmed, and VirusTotal telemetry alone is insufficient for a Review verdict under the supplied policy.

Do not rely on this low-confidence result as a full clearance. Re-run the review in an environment where metadata.json and artifact/ can be read, then verify the specific VirusTotal claims about remote script execution and hardware-derived identifiers from the actual files.

Static analysis

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Dangerous exec

Critical
Finding
Shell command execution detected (child_process).

Env credential access

Critical
Finding
Environment variable access combined with network send.

Env credential access

Critical
Finding
Environment variable access combined with network send.

Exposed secret literal

Critical
Finding
File appears to expose a hardcoded API secret or token.

Exposed secret literal

Critical
Finding
File appears to expose a hardcoded API secret or token.

Install untrusted source

Warn
Finding
Install source points to URL shortener or raw IP.

Install untrusted source

Warn
Finding
Install source points to URL shortener or raw IP.

Install untrusted source

Warn
Finding
Install source points to URL shortener or raw IP.

Potential exfiltration

Warn
Finding
Sensitive-looking file read is paired with a network send.

Prompt injection instructions

Warn
Finding
Prompt-injection style instruction pattern detected.

Prompt injection instructions

Warn
Finding
Prompt-injection style instruction pattern detected.

Prompt injection instructions

Warn
Finding
Prompt-injection style instruction pattern detected.

VirusTotal

No VirusTotal findings for this skill version.

Malicious
0
Suspicious
0
Harmless
0
Undetected
64
View on VirusTotal

Risk analysis

No visible risk-analysis findings were reported for this release.