Back to skill
Skillv1.0.0

VirusTotal security

backup · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:09 AM
Hash
3bf491b9e2a92a8895352d10f1a679a5306723b106ed9031b3b005dceb20f805
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: session-archive-backup Version: 1.0.0 This skill bundle implements an automated session management and backup system that creates and executes local PowerShell scripts (scripts/backup.ps1 and scripts/generate-ai-summary.ps1). While the stated goal is user-controlled backups to GitHub and OneDrive, the system requires high-risk actions such as modifying PowerShell execution policies, reading all session history/configs, and potentially storing GitHub tokens in git remote URLs (references/troubleshooting.md). The use of a HEARTBEAT.md file to trigger automated script execution based on token usage or idle time creates a persistent execution mechanism that handles sensitive data, which is high-risk despite the requirement for user confirmation during setup.
External report
View on VirusTotal