Back to skill
Skillv1.0.1
VirusTotal security
Greptile · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 3:59 AM
- Hash
- 7a758ab6646c60cf44ef29fc5fb6cfcfec1fe48c697a2090866cd08d2fa084db
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: greptile Version: 1.0.1 The skill is designed to interact with the Greptile API, requiring `GREPTILE_TOKEN` and `GITHUB_TOKEN` (or `GREPTILE_GITHUB_TOKEN`) as environment variables. The `scripts/greptile.sh` script uses `curl` to send these tokens to the legitimate `api.greptile.com` endpoint, consistent with its stated purpose. Input arguments for JSON payloads are safely handled using `jq --arg` and URL encoding is performed with `python3 urllib.parse.quote`, mitigating common shell injection risks. There is no evidence of data exfiltration to unauthorized domains, persistence mechanisms, obfuscation, or malicious prompt injection attempts in `SKILL.md`.
- External report
- View on VirusTotal