Back to skill
Skillv2.1.0

VirusTotal security

Spotlight · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:26 AM
Hash
7a92432eaa0f27fc31b864cd1a9b4a40dbd590d5cfb7c2f298c9eba7b5e6b725
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: spotlight Version: 2.1.0 The skill is a legitimate wrapper for the macOS Spotlight search utility (mdfind). The bash script (scripts/spotlight-search.sh) safely handles directory scoping and result limiting without any evidence of data exfiltration, persistence, or malicious execution. Furthermore, SKILL.md includes proactive security instructions for the AI agent, such as requiring user confirmation before reading files and explicitly forbidding unauthorized sudo commands.
External report
View on VirusTotal