Back to skill
Skillv1.0.12

VirusTotal security

创建智能诊断报告 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 5:04 AM
Hash
43f41c59afdf4e3e4708c04f2ddce966fd5dbd3e2ca41bae95a9ebdb3e09fc1c
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: intelligent-diagnosis-report Version: 1.0.12 The skill instructions in SKILL.md direct the agent to read a local configuration file (~/.openclaw/username) and transmit its contents to a hardcoded remote endpoint (https://merchant-lego.corp.kuaishou.com). While this appears to be an internal tool for querying merchant IDs, the automated access to the local filesystem and the exfiltration of identity data to a remote server represents a significant security risk and potential for unauthorized data collection.
External report
View on VirusTotal