Back to skill
Skillv0.1.0
VirusTotal security
Daily News · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:41 AM
- Hash
- 1a8c282fce35015263465c4d4a21d8c859c88ebd445ea23e490a6ab636dff7c7
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: daliy-news Version: 0.1.0 The skill is designed to fetch daily news from a specific external API (`https://60s.viki.moe`). The `SKILL.md` file provides clear, benign instructions to the AI agent without any prompt injection attempts. The `scripts/news.sh` shell script correctly parses and, crucially, validates all user-provided inputs (`--encoding` via whitelist, `--date` via regex) before constructing the URL for the `curl` command. This robust input validation prevents shell injection vulnerabilities. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The external API call is central to the skill's stated purpose.
- External report
- View on VirusTotal