Back to skill
Skillv0.1.0
VirusTotal security
task-progress-stream · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 6:25 AM
- Hash
- 4dce73ff50883541b79d98dba2fb9aa2c2fecf9daa73dc7c11d84fd8171c08e0
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: task-progress-stream Version: 0.1.0 The skill provides a utility to monitor long-running tasks by executing arbitrary shell commands via `spawn` with `/bin/bash -lc` in `scripts/task_progress_stream.js`. While this capability is aligned with the stated purpose of streaming progress updates to the OpenClaw UI, the execution of unsanitized command strings represents a high-risk behavior. No evidence of intentional malice, such as data exfiltration or unauthorized persistence, was found in the code or the `SKILL.md` instructions.
- External report
- View on VirusTotal