Back to skill
Skillv1.0.0
VirusTotal security
Cocktail Boy · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:31 AM
- Hash
- 95acb29c99955fdeb2e28c69b415141f6da553b79027484ca5d05c5b0f2d13b8
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: cocktail-boy Version: 1.0.0 The 'cocktail-boy' skill is a legitimate tool for searching and recommending cocktail recipes from a local CSV database. The core logic in `scripts/query.sh` uses standard Unix utilities like `awk` and `grep` to parse data, and while it lacks rigorous input sanitization (allowing for potential regex injection), this is a minor vulnerability rather than a sign of malice. There is no evidence of data exfiltration, unauthorized network access, or persistence; a mention of `~/.bashrc` in the documentation appears to be a suggestion for user aliases rather than an automated modification. Some minor inconsistencies exist, such as unimplemented commands and missing files mentioned in the README, but these are characteristic of unintentional bugs.
- External report
- View on VirusTotal