Back to skill
Skillv0.1.2

VirusTotal security

Self Skill Evolver · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 6:10 AM
Hash
aa89635a5ee0287306da96529270ea9e38798492cef83b1e39bc023a4cc67b67
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: self-skill-evolver Version: 0.1.2 The self-skill-evolver bundle is a legitimate utility designed to monitor, analyze, and report on the performance and code quality of OpenClaw agent skills. It uses a local SQLite database to store usage logs and health scores, and its analysis logic (in analyzer.py) uses safe methods like ast.parse for code inspection. While a potential SQL injection vulnerability exists in database/models.py due to string formatting in the clear_old_data and get_usage_stats methods, this appears to be an unintentional implementation flaw rather than a malicious backdoor, especially as the CLI enforces integer types for the affected parameters.
External report
View on VirusTotal