Back to skill
Skillv1.0.0

VirusTotal security

External Ki Integration Backup · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 4:22 AM
Hash
9ddfea0f4a70d6c6954669e6fd5d9dcac42fde522acd54d6a96448853c570c19
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: external-ki-integration-backup Version: 1.0.0 The skill is classified as suspicious due to the broad capabilities it grants the AI agent, which, while necessary for its stated purpose, introduce significant vulnerabilities. Specifically, the `SKILL.md` instructs the agent to make arbitrary external network requests using `curl` (e.g., to `api.openai.com`, `api.anthropic.com`), access environment variables for API keys, and perform extensive browser automation via the `browser` tool. While the examples provided are for legitimate AI services, these capabilities could be exploited via prompt injection to exfiltrate sensitive data, interact with arbitrary web pages, or make unauthorized network calls to malicious endpoints, despite the skill's own safety instructions.
External report
View on VirusTotal