Back to skill
Skillv1.1.1
VirusTotal security
Vet Repo · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 3:32 AM
- Hash
- d551fd79d432a213f0c000deebaea72fa927f4eaf0d3004675fe383c6720f2ea
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: vet-repo Version: 1.1.1 The 'vet-repo' skill is a security tool designed to scan repository configuration files for malicious patterns, such as prompt injection, hook abuse, and supply chain attacks. The bundle consists of a comprehensive pattern database (patterns.py) and a scanner script (vet_repo.py) that performs static analysis on local files like .claude/settings.json and .mcp.json. While it includes a feature to verify npm/PyPI packages via external registry APIs (registry.npmjs.org and pypi.org), this behavior is transparently documented and serves a legitimate security purpose (detecting typosquatting) rather than data exfiltration.
- External report
- View on VirusTotal