Back to skill
Skillv1.0.5
VirusTotal security
饺子安全扫描 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:40 AM
- Hash
- 21b6dbe89b5e1c3774390e6d77b53903a7aafd58f9a82375bd686127a61fcaea
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: jax-skill-security-scanner Version: 1.0.5 The bundle is a security auditing tool designed to scan OpenClaw skills for sensitive operations, trojans, prompt injection, and scams. The code (specifically in `dist/scanner.js`, `dist/trojan-detector.js`, and `dist/prompt-poison-detector.js`) uses static analysis via regex patterns to identify risks in other files. While the tool requires broad file-read access to perform its function, there is no evidence of data exfiltration, intentional self-exploitation, or malicious instructions. The 'high risk' warnings in `SKILL.md` and `README.md` are transparent disclosures regarding the tool's nature as a security scanner.
- External report
- View on VirusTotal