Back to skill
Skillv1.0.0

VirusTotal security

Akaunting · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:49 AM
Hash
9f327a24a8fff4713823165807b2c1d22cfcc54071eea0753a5746497bd06107
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: akaunting Version: 1.0.0 The skill is designed to interact with a self-hosted Akaunting instance. The `SKILL.md` provides instructions to deploy Akaunting via Docker and configure the skill with user-provided credentials. The `akaunting.py` script uses these credentials to make API calls to the specified Akaunting URL, without any signs of data exfiltration or unauthorized network activity. The `fix_event_listener.py` script executes commands within the Akaunting Docker container to fix a known bug, but all commands are hardcoded, preventing shell injection. While the `docker-compose.yml` uses weak default passwords for the Akaunting application, this is a vulnerability of the target application's setup, not malicious behavior by the skill itself, which merely facilitates interaction with it.
External report
View on VirusTotal