Back to skill
Skillv1.2.0

VirusTotal security

Mixture of Agents · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:18 AM
Hash
a498ea735aa4606ccb7527334ba5debee754d62c79399783d26407865b6d00e0
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: moa Version: 1.2.0 The OpenClaw skill 'moa' is designed to orchestrate multiple LLM calls via OpenRouter. Its code (scripts/moa.js, scripts/moa-paid.js) and documentation (SKILL.md, manifest.json) consistently show its purpose: taking a user prompt, sending it to various LLMs on openrouter.ai using a user-provided OPENROUTER_API_KEY, and then synthesizing the results. There is no evidence of malicious intent, such as unauthorized data exfiltration, arbitrary code execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent itself. All network calls are directed to the expected OpenRouter API endpoint, and the API key is used for legitimate authentication.
External report
View on VirusTotal