Back to skill
Skillv1.2.0
VirusTotal security
Vinculum - Shared Consciousness · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:09 AM
- Hash
- 615677fbe7792d6695cad7d7ca3a841b4f68d456bcf36af1c2b8fe797ae5acd1
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: vinculum Version: 1.2.0 The OpenClaw AgentSkills skill bundle 'vinculum' is designed for shared consciousness between Clawdbot instances using Gun.js P2P sync over a local network. The code and documentation clearly align with this stated purpose. It uses standard Node.js practices for managing a local relay daemon (e.g., `child_process.spawn` in `scripts/commands/relay.js` and `scripts/index.js` to run `scripts/relay-simple.js`), persistent configuration (`~/.config/clawdbot/vinculum.yaml`), and data storage (`~/.local/share/clawdbot/vinculum`). The `SKILL.md` and `README.md` explicitly state that sensitive data like `USER.md`, `SOUL.md`, and credentials are NOT shared. There is no evidence of data exfiltration, malicious execution, persistence mechanisms beyond the daemon's PID file, obfuscation, or prompt injection attempts to subvert the agent's core directives or access unrelated sensitive data. All file and network access is directly related to the skill's functionality.
- External report
- View on VirusTotal
