Back to skill
Skillv1.0.0

VirusTotal security

ClawCompany · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMar 20, 2026, 7:26 PM
Hash
a8b22fea9a336c3557aa787925aa0f140a9826f292af36178f348c1cc7cc147f
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: clawcompany Version: 1.0.0 The ClawCompany skill is a legitimate multi-agent orchestration system designed to automate software development by coordinating PM, Dev, and Review agents. The code in src/index.ts and SKILL.md uses the OpenClaw sessions_spawn API to delegate tasks to sub-agents (like OpenCode) in a structured workflow. No evidence of data exfiltration, malicious command execution, or harmful prompt injection was found; the logic is well-organized with appropriate error handling and logging. While the package-lock.json contains a large number of dependencies (including communication libraries like Baileys and Slack SDKs), these appear to be part of the OpenClaw platform's peer dependency tree rather than malicious inclusions by the skill itself.
External report
View on VirusTotal