Back to skill
Skillv1.2.0
VirusTotal security
Mixture of Agents · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:18 AM
- Hash
- a498ea735aa4606ccb7527334ba5debee754d62c79399783d26407865b6d00e0
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: moa Version: 1.2.0 The OpenClaw skill 'moa' is designed to orchestrate multiple LLM calls via OpenRouter. Its code (scripts/moa.js, scripts/moa-paid.js) and documentation (SKILL.md, manifest.json) consistently show its purpose: taking a user prompt, sending it to various LLMs on openrouter.ai using a user-provided OPENROUTER_API_KEY, and then synthesizing the results. There is no evidence of malicious intent, such as unauthorized data exfiltration, arbitrary code execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent itself. All network calls are directed to the expected OpenRouter API endpoint, and the API key is used for legitimate authentication.
- External report
- View on VirusTotal
