Back to skill
Skillv1.0.0
VirusTotal security
Health Auto Log · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:46 AM
- Hash
- 1c832db48a95d3f92d43c136cefda74c4a99525b5979fca3b4593a17ea8c0fa0
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: health-auto-log Version: 1.0.0 The skill bundle is benign. The `SKILL.md` accurately describes the skill's purpose and how the agent should invoke the `record_health_data.py` script with user input. The Python script `scripts/record_health_data.py` securely handles user input by using regular expressions to extract only numeric values, performing type conversions (float/int), and validating these values within reasonable ranges. Crucially, it uses `subprocess.run` with a list of arguments, preventing shell injection, and the numeric values passed to the `mcporter` command are sanitized. There is no evidence of data exfiltration, persistence mechanisms, or malicious prompt injection attempts against the agent.
- External report
- View on VirusTotal