Back to skill
Skillv1.0.4

VirusTotal security

apihz-cn · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 28, 2026, 5:28 AM
Hash
497f446dea11b998ed2eb3b3cdcf123741205d49e96944018b539a5b37b197a9
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: apihz-cn-skill Version: 1.0.4 The skill is a comprehensive wrapper for the ApiHz.cn API service, providing access to over 400 utility APIs (weather, IP lookup, translation, etc.). It includes legitimate security features such as local credential encryption (AES-256-GCM) using a machine-specific fingerprint derived from the hostname and username to protect API keys stored in '.credentials/apihz.txt'. While it includes a referral link (shareid=10013679) and a script for automated daily check-ins (auto-checkin.js), all behaviors are clearly documented in SKILL.md and aligned with the stated purpose. No evidence of malicious data exfiltration, unauthorized persistence, or prompt injection was found.
External report
View on VirusTotal