Back to skill
Skillv1.1.0
VirusTotal security
Surge Download Manager · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:59 AM
- Hash
- ac85650602fe7c07f6d1358c239cd2bd362c2778b93717e321a800f85edf178d
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: surge Version: 1.1.0 The OpenClaw skill 'surge' is a wrapper for the legitimate 'surge' download manager. The SKILL.md provides clear instructions for installation and usage, without any prompt injection attempts to subvert the agent's behavior. The `scripts/surge.py` uses `subprocess.run` and `subprocess.Popen` with lists of arguments, which is the secure method to execute external commands, preventing shell injection vulnerabilities. The script's functionality is entirely aligned with managing downloads and shows no evidence of malicious intent such as data exfiltration, unauthorized execution, or persistence mechanisms.
- External report
- View on VirusTotal