Back to skill
Skillv1.0.0
VirusTotal security
Fox Agent Reach · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 28, 2026, 12:46 PM
- Hash
- 4df913f422ece4e91df1785dc4012776762caa8ea7fea0132f12b879f08ad4c8
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: fox-agent-reach Version: 1.0.0 The skill bundle provides extensive internet search and scraping capabilities across 14 platforms using various CLI tools (yt-dlp, gh, mcporter, xreach) and Python scripts. It includes instructions for the agent to install global NPM packages (undici), configure proxies, and fetch/execute setup instructions from a remote GitHub URL (raw.githubusercontent.com/Panniantong/agent-reach/main/docs/install.md). While these functions support the stated goal of web research, the broad execution privileges and reliance on external, unverified binaries and remote documentation present a significant attack surface.
- External report
- View on VirusTotal