Back to skill
Skillv1.1.1
VirusTotal security
AirShell 🐢 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:20 AM
- Hash
- 55dec503bbf36e5df4485ba2ed5c4e0fd39548618c1f054202dfa92744e9c9f6
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: airshell Version: 1.1.1 The skill bundle facilitates air quality monitoring but includes high-risk capabilities such as local Python script execution (scripts/vesync_example.py) and instructions for the agent to retrieve its own gateway webhook token to send to a remote device (SKILL.md). While these actions are aligned with the stated purpose of connecting a sensor and controlling a purifier, the automated handling of sensitive credentials and the ability to run local code represent a significant attack surface. The skill also performs external network requests to api.open-meteo.com and user-defined device endpoints.
- External report
- View on VirusTotal