Back to skill
Skillv1.0.0

VirusTotal security

ClawBoss - AI Productivity Coach · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 4:13 AM
Hash
f9f2e7b9914245d68e2e9f8069d59dfce31e0b22df259ed0e3fdb6577e6a759a
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: clawboss Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'ClawBoss' is classified as benign. Its functionality as an AI productivity coach, including goal setting, progress tracking, and reflection, is entirely consistent with its stated purpose. All data is stored locally within the `~/.openclaw/workspace/memory/` directory, as explicitly stated in `SKILL.md` and confirmed by the code. The `scripts/state-manager.js` file implements robust filename sanitization (`sanitizeFilename`) to prevent path traversal vulnerabilities when creating or accessing task files. There is no evidence of data exfiltration, malicious execution (e.g., shell commands with unsanitized input), persistence mechanisms, or prompt injection attempts against the AI agent. The `npx` command in the installation instructions is for user-initiated setup, not for agent execution.
External report
View on VirusTotal