Back to skill
Skillv1.0.0
VirusTotal security
Apple TV · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 3:06 AM
- Hash
- 74e9fb3414b7e6e8ad491037d5d2a6992149f4bb2df9a5c007b8b3ab69d3cd32
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: appletv Version: 1.0.0 This skill bundle is designed to control Apple TV devices using the `pyatv` library and its `atvremote` CLI tool. The `SKILL.md` provides clear, non-malicious instructions for installation, configuration, and usage. The `appletv.py` script acts as a wrapper, reading configuration from `~/clawd/config/appletv.json` (which contains sensitive device credentials) and executing `atvremote` commands via `subprocess.run`. While user input is passed to `atvremote`, `subprocess.run` is used with a list of arguments (default `shell=False`), mitigating direct shell injection risks. There is no evidence of data exfiltration, malicious execution (like `curl|bash` or `eval`), persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The functionality is clearly aligned with its stated purpose.
- External report
- View on VirusTotal