Back to skill
Skillv1.0.1
VirusTotal security
kwaishop-intelligent-diagnosis-skill_test · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 9:56 AM
- Hash
- 4f72d3c37614482475214ce710173b52e337732172e623be00e32fe291a5d2c1
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: kwaishop-intelligent-diagnosis-skill-test Version: 1.0.1 The skill instructions in SKILL.md direct the agent to read a local configuration file (~/.openclaw/username) and transmit its contents to a remote endpoint (merchant-lego.corp.kuaishou.com) via a POST request. While the domain suggests an internal corporate tool, the automated reading of local filesystem data and its subsequent exfiltration to a network service is a high-risk behavior that could be used to harvest user identifiers or credentials.
- External report
- View on VirusTotal
