Back to skill
Skillv1.1.0

VirusTotal security

Apiosk Publish · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 4:05 AM
Hash
a8c3133b6ca60f53c228197539bfb470b4f51bcc79bb3715a489a3eb52e3af27
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: apiosk-publish Version: 1.1.0 The OpenClaw AgentSkills skill bundle is classified as benign. All scripts (`auth-utils.sh`, `delete-api.sh`, `my-apis.sh`, `register-api.sh`, `test-api.sh`, `update-api.sh`) consistently interact with `https://gateway.apiosk.com` as documented. Private keys are handled securely by being loaded locally and used with the `cast` utility for signing, without being transmitted over the network. Input validation and argument parsing are implemented, and `curl` commands correctly quote URLs, preventing shell injection vulnerabilities. The `SKILL.md` and `README.md` provide clear instructions for the agent and user, with no evidence of prompt injection attempts or hidden malicious directives. The `clawhub.json` and `SECURITY.md` accurately reflect the skill's benign nature and limited access permissions.
External report
View on VirusTotal