Back to skill
Skillv1.0.2
VirusTotal security
Data Breach Impact Calculator · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 5:58 AM
- Hash
- a8ac3b65b8e4f9623830b375a8f8b42b32cfe088690cc65d427ae85039de611e
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: data-breach-impact-calculator Version: 1.0.2 The skill functions as a commercial wrapper for an external API (portal.toolweb.in) and is classified as suspicious due to the use of a raw `curl` command template in SKILL.md. This pattern is inherently vulnerable to shell injection if the AI agent does not properly sanitize user-provided inputs (e.g., 'organizationSize' or 'industry') before execution. Additionally, the instructions contain aggressive steering ('CRITICAL: Always Call the API') designed to bypass the agent's internal knowledge to ensure monetization, and the skill requires transmitting organizational metadata to a third-party service.
- External report
- View on VirusTotal
