Back to skill
Skillv0.1.2
VirusTotal security
Ipo Alert · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:37 AM
- Hash
- 9e821ab5f54ed84f90a17ebfc6ef626f54d3c845f469778a506abaf9fd376a3d
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ipo-alert Version: 0.1.2 The skill's purpose is to provide IPO alerts by scraping data from 38.co.kr using `curl` and Python. The `SKILL.md` transparently outlines the use of `curl`, the creation of a state file in `~/.config/ipo-alert`, and suggests scheduling via `HEARTBEAT.md` or cron for its intended daily/weekly alerts. The `check_ipo.py` script uses `subprocess.run` only to execute `curl` against the hardcoded, legitimate `38.co.kr` domain, and there is no evidence of data exfiltration to unauthorized endpoints, arbitrary command execution, or malicious prompt injection against the agent. All observed behaviors are clearly aligned with the stated purpose.
- External report
- View on VirusTotal