Back to skill
Skillv1.0.2
VirusTotal security
Twitter Video Download · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:56 AM
- Hash
- 95c6dc08cee2358c48676545d51fd1bde3f3e0d85f1fc069c3dad1a3fdc58e11
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: twitter-video-download Version: 1.0.2 The skill is a legitimate utility for downloading Twitter/X videos using the well-known yt-dlp library. The implementation in `scripts/download.mjs` follows security best practices by using `child_process.spawn` with `shell: false` to prevent command injection, validating URLs against a whitelist (twitter.com/x.com), and sanitizing filenames to prevent path traversal. No evidence of data exfiltration, malicious execution, or prompt injection was found.
- External report
- View on VirusTotal