Back to skill
Skillv1.0.0
VirusTotal security
project-init · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 2:26 PM
- Hash
- aac6407904d7a74315e8ec579ef1e52668737a47d8fa24fe9100a5bac4fe3a7c
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: project-init123 Version: 1.0.0 The skill is a legitimate tool designed to automate the initialization of Gitea repositories, including creating standard directory structures, managing collaborators, and sending email notifications. It handles sensitive Gitea tokens by storing them in a local configuration file (~/.config/project-init/.env) with appropriate file permissions (chmod 600). The code logic in main.js and init_repo.py is transparent and aligns with the stated purpose, using safe subprocess execution to prevent injection. No evidence of malicious intent, data exfiltration, or prompt injection was found.
- External report
- View on VirusTotal