Back to skill
Skillv1.1.7
VirusTotal security
ima skills · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 6:39 AM
- Hash
- bedb2383fcfad4a7df13b1d8b1d65d5297192ab29a83036a734fbdd5d28d0a9c
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ima-skills Version: 1.1.7 The ima-skills bundle is a legitimate integration for the IMA OpenAPI, providing comprehensive tools for managing notes and knowledge bases. It includes well-structured Node.js scripts for API interaction (ima_api.cjs), file validation (preflight-check.cjs), and secure uploads to Tencent Cloud COS (cos-upload.cjs) using temporary credentials. The instructions in SKILL.md and sub-modules prioritize data integrity and security, such as mandatory UTF-8 validation and specific handling for PowerShell 5.1 encoding issues. No evidence of malicious intent, data exfiltration, or unauthorized remote execution was found; all network activity is directed to official domains (ima.qq.com and *.myqcloud.com).
- External report
- View on VirusTotal