Back to skill
Skillv1.0.1

VirusTotal security

Package Track · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 5:54 AM
Hash
e5e4f832261c6b81475874f53a498e1abf10988ff7c27c18fe7ce1dab9c3bcca
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: package-track Version: 1.0.1 The package-track skill is a legitimate implementation for querying parcel logistics via the Kdniao (快递鸟) API. The code uses standard Python libraries (urllib, hashlib) to sign and send requests to official endpoints (api.kdniao.com), and there is no evidence of data exfiltration, malicious execution, or prompt injection in SKILL.md.
External report
View on VirusTotal