Back to skill
Skillv0.1.2
VirusTotal security
Decompose Mcp · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:00 AM
- Hash
- bc873b4fbe47f788e477cd4ee86f3699be2e235c67a3db9365c783f1be4505af
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: decompose-mcp Version: 0.1.2 The skill is designed for text decomposition, including fetching content from user-provided URLs. While the `decompose_url` tool requires network access, which is declared in `claw.json`, the `SKILL.md` documentation explicitly details robust Server-Side Request Forgery (SSRF) protection by blocking private/internal IP ranges. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, or obfuscation. The transparency regarding network usage and the proactive mitigation of SSRF risks indicate a benign intent.
- External report
- View on VirusTotal