Back to skill
Skillv1.0.0
VirusTotal security
tech-news-bulletin · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 23, 2026, 7:01 AM
- Hash
- 28ad36e00a26efa7ba3b5ac6222ff43bcd887275b782144e9eecea6fccd5f3f6
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: tech-news-bulletin Version: 1.0.0 The skill contains hardcoded recipient email addresses belonging to a specific organization (a-star.edu.sg) and a hardcoded internal IP address (172.20.86.203) for the Ollama summarization service in scripts/bulletin.py. Although the SKILL.md documentation notes that these should be customized, the default configuration poses a data leakage risk by sending news digests to the hardcoded addresses and relies on a non-public network resource. This behavior suggests an improperly sanitized internal tool that could lead to unintended information disclosure if executed without modification.
- External report
- View on VirusTotal