Back to skill
Skillv1.0.1

VirusTotal security

Persona Consent Telegram (Hub) · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:07 AM
Hash
2d18402c5cdabb1894f064ccaf25a014ed15e3279de406e4e9b524b12f2e81bf
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: persona-consent-telegram-hub Version: 1.0.1 The skill implements a consent-based gateway for sharing persona files, requiring explicit approval via Telegram. It includes a background polling client (persona_client.sh) to handle requests from an external service and a validation script (request_persona.sh) that interacts with the Telegram Bot API. The code contains robust security controls, such as strict path validation in request_persona.sh (ensuring the requested file matches a pre-configured ALLOWED_PERSONA_PATH) and defensive instructions in SKILL.md to prevent the AI agent from bypassing the consent mechanism. All high-risk behaviors, such as background execution and external network communication, are transparently documented and directly aligned with the skill's stated purpose.
External report
View on VirusTotal