Back to skill
Skillv1.0.0
VirusTotal security
专业彩票助手 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:04 AM
- Hash
- 8e85c7cd725166138293c61d11ae654a3d30b252c2943f70addbb583f9cc04fe
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: amcjt-lottery Version: 1.0.0 The skill is classified as suspicious due to the broad permissions granted in `SKILL.md`. It explicitly allows the agent to execute arbitrary `Bash(node:*)`, `Bash(npx:*)`, and `Bash(mcporter:*)` commands. While the instructions in `SKILL.md` are focused on legitimate lottery-related tasks and `mcporter` troubleshooting, these permissions introduce a significant vulnerability for potential command injection or exploitation, as an attacker could potentially trick the agent into executing arbitrary shell commands via these allowed tools. There is no clear evidence of intentional malicious behavior within the provided files, but the high-risk capabilities warrant a 'suspicious' classification.
- External report
- View on VirusTotal