Back to skill
Skillv1.0.0
VirusTotal security
Box · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:11 AM
- Hash
- ca156007682596e6918097f1a06358bf3cadcc13ebca284f76225befc9aa2ac1
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: box-cli Version: 1.0.0 The skill bundle provides instructions for installing and configuring the official Box CLI, enabling an OpenClaw agent to interact with the Box API. It explicitly guides the agent/user on how to provide credentials securely (e.g., via environment variables or a config file in `/data/.secrets/`), set file permissions (`chmod 600`), and register them with the Box CLI. While the skill involves reading environment variables and executing shell commands for configuration, these actions are standard for CLI setup and are directly aligned with the stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation. The skill also includes security best practices, advising against committing credential files and promoting least-privilege access.
- External report
- View on VirusTotal