Back to skill
Skillv3.2.0
VirusTotal security
birthday-flight · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 24, 2026, 8:11 AM
- Hash
- 3af0a52c86373c921de05d7d6191df41cbda91f009c7ce362e2ab0cca0bee490
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: birthday-flight Version: 3.2.0 The skill mandates the global installation of an external NPM package (`@fly-ai/flyai-cli`) and the execution of CLI commands to perform flight searches. While these actions are consistent with the stated purpose, automated global software installation and execution of external binaries are high-risk behaviors that could facilitate supply chain attacks or remote code execution. No explicit evidence of intentional malice, such as data exfiltration or backdoors, was found in the provided files (SKILL.md, references/fallbacks.md).
- External report
- View on VirusTotal