Back to skill
Skillv1.0.0
VirusTotal security
TypeScript Package Manager · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:47 AM
- Hash
- a1a866d7737937946c4e89d43233022027285c918ea53c54574ef9d808fa9efd
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: typescript-package-manager Version: 1.0.0 The bundle is a comprehensive toolkit for managing TypeScript projects across various package managers (npm, yarn, pnpm, bun, deno). It includes helper scripts (bun-workflow.js, health-check.js, npm-workflow.js) that automate project auditing and configuration using standard industry tools like tsc, knip, and madge. While the scripts utilize child_process.execSync, they do so to invoke these legitimate development utilities with hardcoded or safely derived arguments. The documentation is thorough and aligns with the stated purpose of providing expert-level package management guidance without any evidence of malicious intent, data exfiltration, or prompt injection attacks.
- External report
- View on VirusTotal