Back to skill
Skillv0.2.6

VirusTotal security

Openclaw Sec · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:16 AM
Hash
561fad5c9c97211ad7aae762a1f7ec839600f71a21268cbdf470a340a367e58d
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: openclaw-sec Version: 0.2.6 The OpenClaw Security Suite is a security tool designed to detect and prevent various attacks like prompt injection, command injection, SSRF, path traversal, and secret exposure. All analyzed files, including the `SKILL.md` documentation, TypeScript source code, and shell scripts (`hooks/install-hooks.sh`), consistently align with this stated purpose. The tool's functionalities, such as scanning for malicious patterns, logging security events to a local SQLite database (`.openclaw-sec.db`), and sending notifications to configurable endpoints, are legitimate for a security product. The 'malicious' examples found in the code and documentation are test cases that the tool is designed to *detect and block*, not execute. There is no evidence of intentional harmful behavior, data exfiltration to unauthorized external endpoints, or persistence mechanisms beyond standard OpenClaw hook installation.
External report
View on VirusTotal