Back to skill
Skillv1.0.0

VirusTotal security

npm · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 6:18 AM
Hash
ad5f3373255f5edad184df45f775d16e8f901137b5da743d1623d0270b69792f
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: npm Version: 1.0.0 The npm skill bundle provides standard package management functionality for the OpenClaw ecosystem. It includes security-conscious guardrails, such as using temporary configurations via 'mktemp' for read-only operations and explicit instructions for handling OTPs and beta tags, with no evidence of malicious intent, data exfiltration, or unauthorized execution in SKILL.md or _meta.json.
External report
View on VirusTotal