Back to skill
Skillv1.0.2
VirusTotal security
Youtube Notification Analysis · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:27 AM
- Hash
- 9585768814e87f491c2dae1946da669952a65b2e70bbe4b23c331b29f8c73d18
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: youtube-notification-analysis Version: 1.0.2 The skill is classified as suspicious due to its explicit capability to "execute trades" using a `tiger-trade` skill, which represents a high-risk financial operation. Additionally, the `SKILL.md` file contains shell commands using `yt-dlp` with unsanitized placeholders (`<video_url>`, `VIDEO_ID`), which introduces a shell injection vulnerability if the AI agent or user input is not properly sanitized. While there is no evidence of intentional malicious behavior like data exfiltration or backdoors, these combined factors present significant security risks.
- External report
- View on VirusTotal