Back to skill
Skillv0.1.5

VirusTotal security

Case Study Writing · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 3:41 AM
Hash
a67f560a238a151479d7a96679bb6d8f3edc9781ebc04c884bc0f7ddfe8484b3
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: case-study-writing Version: 0.1.5 The skill is classified as suspicious due to several high-risk capabilities and practices, even though the provided examples are benign. The `SKILL.md` file instructs the agent to install `inference.sh` using `curl -fsSL ... | sh`, which is a common and risky supply chain vector. Furthermore, the `allowed-tools: Bash(infsh *)` permission grants broad access to `infsh` commands, and the skill explicitly demonstrates the use of `infsh app run infsh/python-executor`, which allows arbitrary Python code execution. While the Python example is for data visualization, this capability represents a significant vulnerability if the agent were to be prompted with malicious code.
External report
View on VirusTotal