Back to skill
Skillv1.0.1

VirusTotal security

YouTrack Project Management · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:08 AM
Hash
d170f2be9928f0fe52da8f7a6e83becb59de42fcfc46dd02dfae6e502808526c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: youtrack-digisal Version: 1.0.1 The skill bundle is benign. The Python scripts (`youtrack_api.py`, `invoice_generator.py`) provide a client for the YouTrack REST API, enabling operations like listing projects/issues, creating issues, and generating invoices from time tracking data. Authentication relies on a YouTrack API token, which is handled securely by reading from an environment variable or argument and used solely for authenticating requests to the specified YouTrack instance. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in the `SKILL.md` that would manipulate the agent beyond its stated purpose.
External report
View on VirusTotal