Back to skill
Skillv1.0.0

VirusTotal security

Bring! Shopping Lists · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:24 AM
Hash
95ef4442d7491fc0a3e84179820fde7868a3bd7c7d0a03a72fc190dc678dd15c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: bring Version: 1.0.0 The skill is designed to manage Bring! shopping lists. It requires and stores user credentials (email and password) in `~/.openclaw/bring/config.json`, which is necessary for its stated purpose. The `SKILL.md` provides clear, task-oriented instructions for the AI agent without any evidence of prompt injection attempts to subvert the agent's security or intended function. The `scripts/bring-cli.js` uses a legitimate third-party library (`bring-shopping`) to interact with the Bring! API, and does not exhibit any malicious behaviors such as unauthorized data exfiltration, arbitrary command execution, persistence mechanisms, or access to unrelated sensitive files.
External report
View on VirusTotal