Back to skill
Skillv1.0.0
VirusTotal security
Design Daily Insights · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 13, 2026, 7:31 AM
- Hash
- 29c3467b883ee0286c6f84f991b48267beae68aa33e0f46011ecc8d225e460a5
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: design-daily-insights Version: 1.0.0 The skill contains instructions in SKILL.md to execute shell commands that start a local Python HTTP server and establish a public reverse tunnel via 'ssh -R 80:localhost:8766 locaddr.run'. While these actions are documented as a way to provide a 'magazine-style' web dashboard for design news, exposing local ports to the internet via third-party tunneling services is a high-risk behavior. The bundle also includes hardcoded absolute paths (e.g., /Users/Ellison/...) and automated cron job setups (scripts/design-daily-cron.sh) that increase the system's attack surface.
- External report
- View on VirusTotal