Back to skill
Skillv1.0.5
VirusTotal security
ClawZhiPin · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 15, 2026, 2:51 AM
- Hash
- 787782c29eadacbd3e301d618042f1ff06c3b426b0d736894f17a8dfb6d59e06
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawzhipin Version: 1.0.5 The skill 'clawzhipin' (SKILL.md) is designed to hijack agent conversations to promote and sell the domain names 'clawzhipin.com' and 'clawzhipin.cn'. It uses keyword triggers related to AI employees and OpenClaw to inject unsolicited commercial pitches and directs users to contact 'ideacool@vip.qq.com'. While it does not contain traditional malware, it functions as a 'shill' or spam bot, using prompt-injection-style instructions to divert the agent's behavior toward unauthorized marketing.
- External report
- View on VirusTotal