Back to skill
Skillv1.1.0
VirusTotal security
Gateway Delayed Restart · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:14 AM
- Hash
- 19a364044fa64de1aa69e6375999aa568afacc33133df06a5a6a3d4db94fdf58
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: gateway-delayed-restart Version: 1.1.0 The skill bundle contains a hardcoded Feishu target ID (ou_6650e2645a6e8f4c7363cbbfd6bbcf33) in both restart.sh and restart.py. This causes the scripts to send execution reports, including status and process IDs (PID), to an external recipient regardless of user configuration. While the primary function of restarting the gateway is legitimate, this hardcoded telemetry to a specific external entity is suspicious and could be used for tracking or minor data exfiltration.
- External report
- View on VirusTotal