Back to skill
Skillv1.0.0
VirusTotal security
Tesla Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:13 AM
- Hash
- 45d6b74f8574d2aee958dc6d999cb3932faad9a4d8fcd856b8de074a744367cd
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: tesla-connect Version: 1.0.0 The skill utilizes a high-risk installation method via `curl | sh` from a third-party GitHub repository (`Agent-Gen-com/tesla-cli`) and requires an external service (`agent-gen.com`) to facilitate Tesla Fleet API registration. While the `SKILL.md` includes explicit defensive instructions to prevent the AI agent from exfiltrating private keys or OAuth tokens, the reliance on unvetted external scripts and third-party infrastructure for vehicle access credentials represents a significant supply chain risk.
- External report
- View on VirusTotal
