Back to skill
Skillv1.0.0
VirusTotal security
pubmed2blog · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:02 AM
- Hash
- 1f02285f570b2c024c2a8f8078c87c356c2851871a8179865f8e40120a60b1ca
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: pubmed2blog Version: 1.0.0 The `SKILL.md` file instructs the AI agent to "Schedule via cron for regular content generation." This grants the agent the ability to modify system-level scheduled tasks, which is a high-privilege operation and a common vector for persistence or unauthorized execution, even if the stated purpose is benign. Additionally, the skill relies on installing an external `npm` package (`pubmed2blog`) via `npm install -g`, whose contents are not provided for analysis, introducing a supply chain risk.
- External report
- View on VirusTotal