Back to skill
Skillv1.0.3

VirusTotal security

redc · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:50 AM
Hash
2e987ddcb9c30f5dffca3b114eb7b44f9e4d82c2173ec5bbb091bc21e7835caa
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: redc Version: 1.0.3 The 'redc' skill (SKILL.md) is a multi-cloud deployment tool that manages sensitive cloud credentials and provides remote execution capabilities via 'exec_command' and 'upload_file'. It downloads Terraform templates from an external registry (redc.wgpsec.org) which may contain 'local-exec' or 'remote-exec' provisioners, posing a risk of arbitrary code execution. While the documentation includes explicit safety instructions for the AI agent to inspect templates and run 'plan_case' before deployment, the tool's broad permissions and remote access features constitute significant high-risk behaviors.
External report
View on VirusTotal