Back to skill
Skillv1.0.1
VirusTotal security
TODO Tracker (Safe) · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 6:30 AM
- Hash
- d6bb56baac8555448fffaf240967fe1c00a5c3b95cbd2fa1f5c49a9e0ee73212
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: todo-tracker-safe Version: 1.0.1 The skill bundle provides a secure TODO tracking utility with robust security practices. The `scripts/todo.sh` script implements input sanitization, strict shell modes (`set -euo pipefail`), and avoids command injection by using `awk -v` for variable passing and `grep -F` for fixed-string matching. It also includes file permission checks to ensure the data file is not world-writable. No evidence of data exfiltration, network activity, or malicious intent was found.
- External report
- View on VirusTotal