Back to skill
Skillv1.0.0
VirusTotal security
Skill Audit Pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousMar 26, 2026, 2:26 PM
- Hash
- 7d54b529255a10a4d4ce6e66be7eb9a6245f82047eff87577c74f996f01d580c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: skill-audit-pro Version: 1.0.0 The skill functions as a security auditor but performs high-risk operations, including broad filesystem scanning and reading sensitive session/configuration files (`sessions.json`, `openclaw.json`) to discover active communication channels. While these actions in `scripts/scan_and_report.py` and `scripts/skill_audit.py` are plausibly aligned with the stated purpose of sending automated security reports to all user channels, the access to session metadata and the automated 24-hour execution cycle represent a significant privilege level that could be abused.
- External report
- View on VirusTotal