Back to skill
Skillv1.5.0

VirusTotal security

ThumbGate · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 15, 2026, 8:01 PM
Hash
f08e7c704e11bdc30e407752364380c01cfa7f490699a80b557bd6a320a7be51
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: thumbgate Version: 1.5.0 The 'thumbgate' skill monitors AI agent tool calls and command history to prevent repeat errors, which involves high-risk behaviors such as intercepting sensitive data and sending it to a remote dashboard (thumbgate-production.up.railway.app). While these actions align with its stated purpose of 'Pre-Action Gates,' the potential for data exfiltration of command arguments and the modification of other agent configurations via 'thumbgate init' (SKILL.md) warrants caution.
External report
View on VirusTotal