Back to skill
Skillv0.1.0

VirusTotal security

Withings (Official API) · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 6:06 AM
Hash
027d71bc4cf8b9d4a7645881f252b1a39d0a9208ebd15178aea4f8a3f58e8efb
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: openclaw-withings Version: 0.1.0 The skill bundle is a standard OAuth2 integration for the Withings health API. It follows security best practices by using Python's standard library to avoid supply chain risks and setting restricted file permissions (0o600) on the stored token file (~/.config/openclaw/withings/token.json). The scripts (withings_fetch_daily.py, withings_token.py, etc.) communicate exclusively with official Withings endpoints (wbsapi.withings.net and account.withings.com) and perform data normalization as described in the documentation without any signs of malicious intent, exfiltration, or prompt injection.
External report
View on VirusTotal