Back to skill
Skillv1.0.0

VirusTotal security

Qverisai 1.0.1 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 4:37 AM
Hash
6d1f6689a0a85f505b0184fa225aa3292225cb795492f72fcb274ae2594caa49
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: qverisai-1-0-1 Version: 1.0.0 The OpenClaw skill `qverisai` is a client for the QVeris API, designed to search and execute dynamic tools. The `SKILL.md` clearly defines its purpose, required environment variables (`QVERIS_API_KEY`), and network endpoint (`https://qveris.ai/api/v1`). The `scripts/qveris_tool.mjs` code strictly adheres to these declarations, only accessing the specified API key and communicating solely with the declared QVeris endpoint. It uses only Node.js built-in `fetch`, avoiding external dependencies. There is no evidence of prompt injection, data exfiltration (beyond the API key to its intended service), unauthorized command execution, persistence mechanisms, or obfuscation. The skill's behavior is fully aligned with its stated purpose as a legitimate API client.
External report
View on VirusTotal