Back to skill
Skillv1.1.1
VirusTotal security
Keychat · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 4:25 AM
- Hash
- b258156dbe4fb7b30650fbeb2f7f8008dd8a3d473bbe6ff461af6ddd443aa433
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: keychat Version: 1.1.1 The skill automates the installation of a third-party plugin (@keychat-io/keychat) that performs high-risk operations, including spawning a Rust sidecar binary and accessing the OS keychain (macOS Keychain/Linux libsecret). While these actions are documented in SKILL.md as necessary for Signal Protocol encryption and identity management, the execution of external binaries and access to sensitive system credential stores are significant security risks that require verification of the underlying plugin's integrity.
- External report
- View on VirusTotal