Back to skill
Skillv0.1.0
VirusTotal security
Arena Research · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 8:34 AM
- Hash
- 276a58a5c201a5af92c120b7341d62caf5181487e118e234e8ae865d1868b9fe
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: arena-research-skill Version: 0.1.0 The `SKILL.md` file instructs the AI agent to execute shell commands, specifically `source ~/.config/env/global.env`, which loads environment variables and grants shell access. It also instructs the agent to use `web_fetch` to retrieve content from external URLs, granting network access. While these capabilities are plausibly needed for a research agent, they represent significant risky capabilities (shell execution, network access) that could be exploited if the agent's environment is not properly sandboxed or if the agent were to be prompted with malicious inputs, thus warranting a 'suspicious' classification. There is no clear evidence of intentional malicious behavior like data exfiltration or backdoor installation in the provided files.
- External report
- View on VirusTotal
