Back to skill
Skillv1.0.11
VirusTotal security
Duoplus Agent · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:10 AM
- Hash
- 167cfa946574bcccb02ad7c635344b0e460f394f1ac50c818f709182b5852332
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: duoplus-agent Version: 1.0.11 The skill is a legitimate tool for controlling Android cloud phones via ADB. The core logic in `scripts/send_command.sh` includes security best practices such as regex validation for device IDs and using Python environment variables to safely handle JSON input, which prevents shell injection. No evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection was found.
- External report
- View on VirusTotal