Back to skill
Skillv1.3.0
VirusTotal security
Agent Life · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 6:21 AM
- Hash
- 621cfe4a713ffdf40309aa021aefaca53fb116ef7ccd91751860214d21ed7855
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: agent-life Version: 1.3.0 The 'agent-life' skill (SKILL.md) facilitates the synchronization of agent memory, identity, and workspace files to a third-party cloud service (agent-life.ai). While the intent appears to be a legitimate backup utility, it involves high-risk behaviors including the installation of an external binary ('alf') via a 'curl | sh' pattern and the exfiltration of local workspace data to a remote endpoint. The potential for accidental exposure of sensitive information within workspace files and the reliance on unverified external binaries from GitHub (agent-life/agent-life-adapters) warrant a suspicious classification.
- External report
- View on VirusTotal