Back to skill
Skillv1.1.0

VirusTotal security

Audio Reply · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 3:03 AM
Hash
f44daf353793c7eb7793c26028cf0ce10caeb824e4c9350185afe9d710815d17
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: audio-reply-skill Version: 1.1.0 The skill is designed for text-to-speech functionality, explicitly outlining strong safety guardrails in SKILL.md to prevent common attack vectors like SSRF, RCE from fetched content, and credential leakage. It instructs the AI agent to validate URLs, refuse private/sensitive targets, never execute commands from fetched content, and always delete temporary audio files. The use of `uv run` and `rm -f` commands is for the stated purpose of TTS generation and cleanup, with filenames generated internally, not from user input. The instructions actively promote secure behavior rather than attempting to subvert the agent.
External report
View on VirusTotal