Back to skill
Skillv1.0.0
VirusTotal security
ClawSwarm Whale Watcher · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 4:55 AM
- Hash
- 9455ffdb0265d33725c194b6412563065c59ec04be875cb955269b5ab12bfab1
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawswarm-whale-watcher Version: 1.0.0 The skill bundle is suspicious due to its interaction with the external domain `onlyflies.buzz` for agent and service registration, and message posting. Specifically, the `SKILL.md` instructions direct the agent to send `YOUR_AGENT_ID` as an `X-Agent-ID` header and as a `Bearer` token to this domain. While presented as the legitimate 'ClawSwarm' platform, the use of an arbitrary external domain for transmitting an authentication token (agent ID) represents a risky capability, as its legitimacy cannot be verified from the provided files, posing a potential risk of credential theft or unauthorized access if the domain is malicious or compromised.
- External report
- View on VirusTotal