Back to skill
Skillv1.0.13
VirusTotal security
MLB Daily Scores · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:41 AM
- Hash
- e8165c2205104a6b38e5b318a6cd61a4b48c7da0aa9cd5e4ecf39e0eaf649b49
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: mlb-daily-scores Version: 1.0.13 The skill bundle is benign. It fetches MLB data from the official MLB Stats API (statsapi.mlb.com) and formats it. The `SKILL.md` explicitly prevents prompt injection by specifying the exact command to run `fetch_mlb.py` with `--config` and disallowing user input interpolation. Input validation is performed on team names and timezones in `fetch_mlb.py`. Dependencies (`MLB-StatsAPI`, `requests`) are standard and installed into a virtual environment. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All network calls are to the expected MLB API endpoint.
- External report
- View on VirusTotal