Back to skill
Skillv1.0.1
VirusTotal security
help stay focus . currently only support chinese · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:43 AM
- Hash
- 3226a274cc400654dd8d4b350e3bb9a6eb1b58b4448e34ec6e78935de8c216f4
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: focus-api Version: 1.0.1 The skill bundle describes a 'FocusAI' tool designed for continuous screen monitoring and screenshot capture, which are high-risk activities for privacy. It explicitly instructs the AI agent to install the software by cloning a remote GitHub repository (github.com/HR2AY/focusAI) and executing a batch file (start.bat), posing a significant supply-chain risk. While these capabilities are aligned with the stated purpose of productivity tracking and the documentation mentions user consent, the automated execution of unverified remote scripts and the potential for sensitive data exfiltration via screenshots make this bundle suspicious.
- External report
- View on VirusTotal