Back to skill
Skillv1.0.1

VirusTotal security

Brave Web Search · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 4:41 AM
Hash
a909a9eddd969e22618d8ec544eb2990d7bb896725f84abd5e8089bf1e93ceec
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: brave-web-search Version: 1.0.1 This skill is designed for Brave Web Search and Summarizer API access. Both the `SKILL.md` documentation and the `index.js` code demonstrate strong security awareness. The `SKILL.md` explicitly instructs the OpenClaw agent to prevent shell injection by passing user input as discrete arguments (e.g., via `execFile`-style invocation) and not interpolating it into shell command strings. It also states the skill does not read local files. The `index.js` code correctly processes arguments from `process.argv` and makes legitimate API calls to Brave Search, without any external dependencies, local file access, or other malicious behaviors.
External report
View on VirusTotal