Back to skill
Skillv1.0.0
VirusTotal security
iHRFlow HR Assistant · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 6:06 AM
- Hash
- 99fbebf3852c72b3ce8de31987eab9d26b5af21006a3864ce3326ab17f65142e
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ihrflow-hr Version: 1.0.0 The ihrflow-hr skill bundle is a legitimate integration for the iHRFlow talent management platform, implementing a Model Context Protocol (MCP) client via a shell script (scripts/mcp-call.sh). The script uses standard tools like curl and jq to interact with a user-defined backend URL (IHRFLOW_MCP_URL) and handles authentication and tool execution as described in the comprehensive documentation (SKILL.md, README.md, and api-reference.md). No evidence of data exfiltration, malicious execution, or prompt injection was found; the requested shell and network permissions are appropriate for its stated purpose of communicating with an external HR API.
- External report
- View on VirusTotal