Back to skill
Skillv1.2.0
VirusTotal security
Agent Signet ID · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 3:57 AM
- Hash
- 12cc20e441b2445633715696db11d154d28d4cb9a0b25c6bd1f8c5bc90bb92c0
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: agent-signet-id Version: 1.2.0 The skill bundle provides documentation for interacting with the Signet trust scoring API. All described network interactions are directed towards `https://api.agentsignet.com`, which aligns with the stated purpose. The `SKILL.md` explicitly warns against including sensitive data in API calls and provides standard instructions for API key management. While the identity verification process involves the agent providing a `callbackUrl` (a common webhook pattern that could be a vulnerability surface for SSRF if the agent is tricked into providing a malicious URL), the skill itself does not instruct the agent to provide such a URL, nor does it exhibit any other malicious intent, data exfiltration, or arbitrary code execution.
- External report
- View on VirusTotal