Back to skill
Skillv1.0.0
VirusTotal security
Personal Sleep Coach · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:14 AM
- Hash
- fef9e51de769119c6df1a4c118c36901b3a0a637bb6f3dd9e5cfb7b9a5163ab5
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: personal-sleep Version: 1.0.0 The skill instructs the AI agent to read and update `knowledge/personal/sleep.md` based on user input. While the stated purpose is benign (logging sleep data), the instruction to write user-provided data into a markdown file that the agent subsequently reads creates a prompt injection vulnerability. A malicious user could inject instructions into the 'Заметки' field, which the agent might then interpret and execute when accessing its knowledge base, as per the `SKILL.md` instructions.
- External report
- View on VirusTotal