Back to skill
Skillv3.0.0

VirusTotal security

Ralph Security Audit · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 4:13 AM
Hash
16f53ae0bd2feaf1c62c480d8c13aa613f354b9ef8240e94ba97b26760aae941
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: ralph-security Version: 3.0.0 The skill bundle defines a comprehensive security audit. While it instructs the AI agent to perform high-risk actions like reading environment variables, searching for secrets (API keys, passwords, tokens), executing `git` commands, enumerating network services, and writing to the filesystem (for reports), these capabilities are explicitly and plausibly required for a legitimate security audit. The `SKILL.md` instructions are detailed and focused on reporting findings, not exfiltrating data or performing unauthorized actions. There is no evidence of malicious intent, prompt injection to subvert the agent, or instructions to act beyond the stated purpose of auditing the project.
External report
View on VirusTotal