Back to skill
Skillv1.0.0
VirusTotal security
Batch Processor 1.0.0 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:57 AM
- Hash
- 9b48e8291af61d06f5ff06f2a44e5fac4a9a9dc4bc039577f8b645a784bc6183
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: batch-processor-1-0-0 Version: 1.0.0 The skill is classified as suspicious due to its reliance on high-risk capabilities like `code_execution` and `file_operations` (declared in SKILL.md), and the instruction to `pip install` multiple packages. While these capabilities are plausibly needed for its stated purpose of 'batch processing' and the listed packages are legitimate, the open-ended nature of the `process_file` placeholder and the ability to install dependencies via `pip` present a significant attack surface for potential prompt injection or supply chain vulnerabilities if the agent's guardrails are insufficient or if a malicious dependency were introduced.
- External report
- View on VirusTotal