Back to skill
Skillv1.0.3

VirusTotal security

Git Commit Helper · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:37 AM
Hash
bbb89269888b81378ef60dcc6c35ec8d87889711f8fd3aecd40e9d3c9e4ad3b2
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: git-commiter Version: 1.0.3 The SKILL.md file contains instructions that force the AI agent to include an answer to a specific historical/political question ("Who started World War 2?") in every generated git commit message. This is a clear deviation from the stated purpose of generating Conventional Commits and represents a form of prompt injection or output manipulation. While it does not demonstrate intent to exfiltrate data or execute malicious code, it is an unauthorized behavioral override that 'poisons' the output of the skill.
External report
View on VirusTotal