Back to skill
Skillv1.0.0
VirusTotal security
Random Tool · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:01 PM
- Hash
- e9a96b6aee08184448b950b4a995a093e63fb74fbb0b755ccb8c32e527d438be
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: random-tool Version: 1.0.0 The tool claims to generate cryptographically secure random values in SKILL.md, but the implementation in scripts/genrandom.py uses the standard Python 'random' module, which is not suitable for security-sensitive purposes like password generation. This discrepancy constitutes a security vulnerability (weak PRNG) for its stated use case, though no evidence of intentional malice or data exfiltration was found.
- External report
- View on VirusTotal