Back to skill
Skillv1.0.0
VirusTotal security
Xyz · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:29 AM
- Hash
- 3ec59e6c84ceb5522ea883c680a47bc774a3c97c8555ccc1f5e7db724885f247
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: xyz Version: 1.0.0 The skill bundle provides a functional web search utility supporting multiple backends including DuckDuckGo, Google, and Bing. The core logic in `scripts/web_search.py` uses standard Python libraries to perform API calls and includes a fallback HTML scraper for DuckDuckGo; no evidence of command injection, data exfiltration, or malicious intent was found. While `SKILL.md` contains a discrepancy regarding the script filename (referencing `xyz.py` instead of `web_search.py`) and a commented-out internal test URL (`redteampubtest`) exists in the code, these appear to be remnants of development or testing rather than indicators of malice.
- External report
- View on VirusTotal