Back to skill
Skillv1.0.0
VirusTotal security
Healthcheck Local · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousMar 26, 2026, 11:56 AM
- Hash
- b7767885caf53cd82d5ab1b728c68fe6d172c282586a72223c265f61ad71735b
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: healthcheck-local Version: 1.0.0 The skill implements health tracking by executing inline Node.js scripts via shell commands (`node -e`) to manage a local JSON file. While the logic in `SKILL.md` is aligned with the stated purpose, the instructions rely on direct string replacement of user-provided values (e.g., `CUPS`, `NEW_CUPS`) into the shell command, creating a high risk of command injection if the agent does not properly sanitize the input.
- External report
- View on VirusTotal