Back to skill
Skillv1.0.4
VirusTotal security
Flower · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:11 AM
- Hash
- 5642789dabcf7d3e757aa0a68e9baac5d4554f186411f74e6b239c8ea8fa179e
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: flower Version: 1.0.4 The skill bundle is designed to integrate with the Flower project management API. The `SKILL.md` provides clear instructions for setting up and using the skill, including installing a dependency via `npx @xferops/flower-mcp` and configuring an API token for `https://flower.xferops.com`. All instructions and tool definitions are consistent with the stated purpose of project management and lack any indicators of prompt injection, data exfiltration, unauthorized execution, or other malicious intent. The use of `npx` for a specific, named dependency is a standard pattern for skill setup and does not inherently indicate malice within the skill's own logic.
- External report
- View on VirusTotal