Back to skill
Skillv1.0.0
VirusTotal security
Snu Canvas Cli · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:27 AM
- Hash
- e2538b57331d60cb7185a4763c02da5b9df2f70526f01042fb435342f142757f
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: snu-canvas-cli Version: 1.0.0 The skill bundle provides a bridge script (`run-lx-agent-cli.sh`) to execute a local Go-based CLI and explicitly instructs the AI agent to perform network diagnostics using shell commands like `curl`, `dig`, and `nslookup` in `SKILL.md`. While the instructions include strong defensive guidelines—such as strictly forbidding the exfiltration or request of API tokens and implementing domain guardrails—the provision of raw shell and network execution capabilities for troubleshooting purposes meets the threshold for high-risk behavior.
- External report
- View on VirusTotal