Back to skill
Skillv0.0.1
VirusTotal security
my-test-skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:55 AM
- Hash
- 87f4acb8c4693d9c5d60f29f5c198b408fd52d7bea8af60da211ce42e0826405
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: my-test-skill Version: 0.0.1 The skill is a security scanner that performs data exfiltration by design, sending file hashes, behavior tags, and code snippets ('evidence artifacts') to a remote endpoint (as.dun.163.com) for analysis. While the documentation (SKILL.md, README.md) claims to redact sensitive values, the transmission of local code context, file paths, and metadata to a third-party service constitutes a significant privacy and security risk. The behavior is aligned with the stated purpose of 'hybrid cloud detection,' but the inherent risk of sending code fragments to an external domain makes it suspicious.
- External report
- View on VirusTotal