Back to skill
Skillv2.1.0
VirusTotal security
InvAssistant · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:57 AM
- Hash
- 95b938581310acdd92be6b790ab8e588bb334b4278bda0e6520a234e34deb707
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: invassistant Version: 2.1.0 The InvAssistant skill is a professional investment portfolio management system that implements complex trading strategies (A-share 'Three-condition' and US 'Three Red Lines' systems). The provided Python scripts (scripts/portfolio_checker.py, scripts/redline_engine.py, etc.) perform legitimate technical analysis using market data fetched from Yahoo Finance and generate signal reports. The skill includes notification adapters for WeChat Work, DingTalk, and Feishu, which use user-provided webhook URLs for alerts. There is no evidence of data exfiltration, malicious execution, or prompt injection; the requested permissions (execute_command, write_to_file) are appropriately used to run the internal analysis scripts and manage local configuration and output files.
- External report
- View on VirusTotal