Back to skill
Skillv1.4.4

VirusTotal security

Xyfcli Order Guide · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 9:43 AM
Hash
446273a3d42204cacaab38dc1b42a327873918243e71932443f35c52324baa55
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: xyfcli-order-guide Version: 1.4.4 The skill bundle provides a legitimate CLI tool (xyfcli) and agent instructions for managing fertilizer orders, customer data, and delivery addresses. The Python code (scripts/xyfcli/) is a standard implementation using Typer and HTTPX to interact with a business API, with configuration stored locally in ~/.xyfcli/config.json. The SKILL.md instructions are well-structured, focusing on business logic and user experience, and specifically include a mandatory confirmation step (Phase 3) before executing the final order placement command, which serves as a safeguard against unauthorized actions.
External report
View on VirusTotal