Back to skill
Skillv1.0.7

VirusTotal security

Openclaw Web Automation · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:55 AM
Hash
5a11b26870bc0af88d885ed3bdc613f24de50256422a1e7684cbea452fe0e128
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: openclaw-web-automation Version: 1.0.7 The skill bundle is classified as benign. The `SKILL.md` instructions do not contain any prompt injection attempts, and the `scripts/run_query.py` script safely handles user input by passing arguments as a list to `subprocess.run`, preventing shell injection. The `runner.py` entrypoint delegates core functionality to the `openclaw_automation` library, which is a standard practice for platform skills. While `manifest.json` grants broad `network_domains: ["*"]` permissions, this is necessary for its stated purpose of "public-site automation" against arbitrary websites, and there is no code within the provided files that indicates an intent to misuse this permission for data exfiltration or other malicious activities.
External report
View on VirusTotal