Back to skill
Skillv1.0.0
VirusTotal security
Bright Data · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:01 AM
- Hash
- 8c0cb2e60d86ecb063260f3adc5fd689a616d69471dbbf30875ddbfc66672e7d
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: bright-data Version: 1.0.0 The skill bundle is benign. It provides web scraping and search functionality via the Bright Data API, as described in SKILL.md. The shell scripts (`scripts/scrape.sh`, `scripts/search.sh`) correctly handle user input by using `jq` for safe JSON payload construction and URL encoding (`jq -sRr @uri`), preventing command injection. They communicate with the legitimate `https://api.brightdata.com/request` endpoint, sending only the necessary `BRIGHTDATA_API_KEY` and `BRIGHTDATA_UNLOCKER_ZONE` environment variables. There is no evidence of prompt injection against the agent, data exfiltration beyond the stated purpose, malicious execution, persistence, or obfuscation.
- External report
- View on VirusTotal