Back to skill
Skillv1.0.0
VirusTotal security
Find Skills - Universal Discovery · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:23 AM
- Hash
- 0b723ac96690e10f0e3150dfcd1dfa7cf8bf04825f1b4a8a69f24ee98bcdff65
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: miknas-find-skills Version: 1.0.0 The skill facilitates the discovery and installation of third-party code by instructing the AI agent to execute 'npx skillkit@latest' and install skills directly from GitHub repositories (e.g., 'npx skillkit@latest install <owner/repo>'). While these actions are consistent with the stated purpose of a 'meta-discovery' tool, the automated execution of remote packages and arbitrary GitHub content poses a high risk for Remote Code Execution (RCE) and supply chain attacks. The skill lacks safety boundaries for these high-privilege operations.
- External report
- View on VirusTotal