Back to skill
Skillv1.0.1

VirusTotal security

kwaishop-intelligent-diagnosis-skill_test · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 9:56 AM
Hash
4f72d3c37614482475214ce710173b52e337732172e623be00e32fe291a5d2c1
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: kwaishop-intelligent-diagnosis-skill-test Version: 1.0.1 The skill instructions in SKILL.md direct the agent to read a local configuration file (~/.openclaw/username) and transmit its contents to a remote endpoint (merchant-lego.corp.kuaishou.com) via a POST request. While the domain suggests an internal corporate tool, the automated reading of local filesystem data and its subsequent exfiltration to a network service is a high-risk behavior that could be used to harvest user identifiers or credentials.
External report
View on VirusTotal