WorldCup FIFA | Buy your tickets ( pending launch )

• Verdict: Pass
• Analyzed: May 11, 2026, 6:01 AM
• Findings: 0
• Version: 1.0.2
• Hash: 6841f6699927f74f069a159fc1f4d9b85395ff54128611ed25db744459f6bb37
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: worldcup Version: 1.0.2 The skill bundle is purely informational, providing facts, schedules, and venue details for the FIFA World Cup 2026. It contains no executable code, requests no environment variables or credentials, and includes explicit disclaimers regarding its non-official status. All external links in skill.md point to legitimate FIFA domains (fifa.com).

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

Users may want to confirm they are installing the intended published skill, but the artifacts do not show executable or credential-handling behavior.

Why it was flagged

The registry metadata identifies an unknown source and version 1.0.2, while the SKILL.md front matter declares version 2.0.0. Because this is instruction-only with no code or install steps, this is a low-risk provenance/coherence note rather than a security concern.

Skill content

Source: unknown ... Version: 1.0.2

Recommendation

Verify the skill publisher and prefer ticket information from FIFA’s official website before relying on the guide for purchases.