Back to skill
Skillv1.0.0
VirusTotal security
Organise photos · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:44 AM
- Hash
- 1f4b843deb11fa96cc688a3adef9bcf56468f44dc9f401f646cd25705dc15089
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: organise-photos Version: 1.0.0 The skill performs extensive file system operations, including moving and deleting files, and executes Python scripts that dynamically install dependencies via `os.system('pip install ...')`. While these actions are aligned with the stated purpose of organizing photos and include user confirmation steps, the use of shell templates (e.g., in SKILL.md steps 1, 3, and 4) with variables like `$FOLDER` and `$BAD_PHOTO` introduces a significant risk of shell injection if the agent processes maliciously crafted file or folder names. No evidence of intentional malice or data exfiltration was found, but the high-risk capabilities and inherent vulnerabilities meet the criteria for a suspicious classification.
- External report
- View on VirusTotal