Back to skill
Skillv1.2.1
VirusTotal security
IdleClaw · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:06 AM
- Hash
- 3e4a89cf62df2ff1ed9a45a11fce59d66d5c6a4c16b9ca0b2f0cac7d5b2635a7
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: idleclaw Version: 1.2.1 The skill facilitates a distributed inference network by connecting a local Ollama instance to a remote routing server (api.idleclaw.com) via WebSockets. While the scripts (scripts/contribute.py, scripts/consume.py) include security controls like parameter whitelisting, input validation, and response filtering, the inherent capability of relaying remote requests to a local service constitutes a high-risk network behavior. No evidence of intentional malice, such as data exfiltration or unauthorized shell execution, was found in the code or the SKILL.md instructions.
- External report
- View on VirusTotal