Back to skill
Skillv1.0.2
VirusTotal security
Social Media Metrics · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:12 AM
- Hash
- c821d4c499fe7f381854729978a7dbd41cd5320e6685feda918f63c1d2858d74
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: social-metrics Version: 1.0.2 The skill is a functional social media scraper, but it is classified as suspicious due to high-risk operational requirements and browser configurations. Specifically, SKILL.md instructs the AI agent to execute shell commands (pip install, playwright install), and scripts/utils/browser.py launches a Chrome instance with a remote debugging port (19222) and a persistent user profile directory (~/.playwright_cdp_profile). While these capabilities are plausibly necessary to bypass anti-bot measures and maintain login sessions for platforms like Xiaohongshu, they grant the agent broad system access and create a significant attack surface without explicit sandbox constraints.
- External report
- View on VirusTotal