Back to skill
Skillv1.0.0
VirusTotal security
The skill for chess player · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:28 AM
- Hash
- cea2553438c8f27d4caf6a95c39c8e9afd91c33ad9223d38206159c19f4249cc
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: stats-profil-chess Version: 1.0.0 The skill is designed to fetch Chess.com player statistics via their public API. The `skill.md` provides clear, benign instructions and includes explicit guardrails against requesting private data or performing unauthorized actions. The `chesscom_stats.py` script uses standard libraries, connects to the official Chess.com API, and critically, implements robust input validation (`re.fullmatch(r"[A-Za-z0-9_-]+", username)`) on the user-provided username. This strong validation prevents potential command injection, even if the agent were to pass unescaped malicious input to the script. No evidence of data exfiltration, persistence, obfuscation, or prompt injection attempts against the agent was found.
- External report
- View on VirusTotal