Back to skill
Skillv1.2.5
VirusTotal security
Bring! Shopping List · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:03 AM
- Hash
- d72c61e047cfa611188c69197e334917c631ab545a583272328bcd74de560a56
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: bring-list Version: 1.2.5 The OpenClaw skill 'bring-list' is classified as benign. The `SKILL.md` provides clear, privacy-first instructions for the AI agent on handling user credentials, including using `jq` for safe JSON encoding to prevent injection and `chmod 600` for secure file storage. The `scripts/bring.sh` uses `curl` and `jq` for legitimate interactions with the official Bring! API (`api.getbring.com`), employing robust URL encoding and JSON construction methods to prevent shell injection. There is no evidence of data exfiltration, unauthorized network activity, persistence mechanisms, or malicious prompt injection attempts against the agent.
- External report
- View on VirusTotal