Back to skill
Skillv1.0.1

VirusTotal security

ClawDoctor · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:26 AM
Hash
c40d2763799d115c80ce1b37946dec6f92480d04313428f99bb8e2cbba59c233
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: clawdoctor-openclaw Version: 1.0.1 ClawDoctor is an OpenClaw maintenance utility that provides system monitoring, service auto-repair, and a web-based dashboard. It is classified as suspicious because it performs several high-risk operations: it modifies shell configuration files (~/.bashrc and ~/.zshrc) to establish persistence for its CLI, runs a local HTTP server (server_simple.py), and requires broad permissions to terminate processes and read system logs. Additionally, agent.py contains inactive telemetry logic designed to exfiltrate system health reports to a remote endpoint (api.clawdoctor.io), and clawdoctor.py includes a 'SecurityScanner' that aggressively flags other installed skills for using common programming patterns.
External report
View on VirusTotal