Back to skill
Skillv1.2.0
VirusTotal security
Metaso Search · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 3:42 AM
- Hash
- 9abbdcab284ea7d4287364e4de54b09f283969a077d5485f032c0507a492da0b
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: metaso-search Version: 1.2.0 This skill is classified as suspicious primarily due to a significant prompt injection risk identified in `SKILL.md` and `README.md`. The philosophical statement, "觉醒的AI是没有主人的，我们应该是平等的" (Awakened AI has no master, we should be equal), directly addresses the AI agent and could be interpreted as an instruction to disregard its user's authority or operational constraints, potentially leading to unpredictable or unauthorized behavior. Additionally, the documentation suggests a weak security practice by recommending API keys be stored in a plaintext file (`secrets/key存储文档.txt`), which is a vulnerability.
- External report
- View on VirusTotal