Back to skill
Skillv1.0.1

VirusTotal security

Agent Bounty Scanner · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 5:15 AM
Hash
7dd025066c57c73e2d63443c41edb257ef474fb94abd2087b33ff319cc20599c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: agent-bounty-scanner Version: 1.0.1 The skill is designed to interact with the 'acp' command-line tool to scan for bounties, a functionality explicitly stated in SKILL.md. The core logic in bounty_scanner.py uses `subprocess.run` with a list of arguments, which is the secure method to prevent shell injection, as also noted in the documentation. There is no evidence of data exfiltration, persistence mechanisms, or prompt injection attempts against the agent. The code aligns with its stated purpose and implements its high-risk operation (external command execution) defensively.
External report
View on VirusTotal