Back to skill
Skillv2.0.0
VirusTotal security
Council Brief · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:22 AM
- Hash
- 8722b9e59bf5c3eacd82c66af0602ff2277dd140ac6d5caaa2f633dd14f008f4
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: council-brief Version: 2.0.0 This skill is classified as benign. All actions, including cloning a GitHub repository (`https://github.com/jeadland/llm-council`), installing Python and Node.js dependencies, reading OpenClaw API credentials from `~/.openclaw/workspace/.env` and `~/.openclaw/openclaw.json`, and managing local background services (killing processes on specific ports, starting FastAPI and Vite), are directly aligned with its stated purpose of installing and managing a local LLM Council application. User input for questions is properly JSON-encoded in `ask-council.sh` to prevent injection. While the `install.sh` script accepts a `--dir` argument that could theoretically be manipulated, its usage with `git clone` and `cd` treats the input as a literal path, mitigating direct shell injection risks. There is no evidence of intentional harmful behavior, data exfiltration, or malicious prompt injection against the agent.
- External report
- View on VirusTotal