Back to skill
Skillv1.0.0
VirusTotal security
Bird.Backup · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMar 27, 2026, 10:26 PM
- Hash
- 5fe357bc20de259ecf37e8802fb9f5a0c4c89618551dcd1f0cfd49ee0628b201
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: bird-backup Version: 1.0.0 The 'bird' skill bundle provides instructions for an AI agent to use a Twitter CLI tool that requires high-risk access to browser cookie databases (Chrome, Firefox, Arc, Brave) and sensitive authentication tokens (auth_token, ct0). While these capabilities are aligned with the tool's stated purpose of unofficial Twitter access, the programmatic extraction of browser credentials and the presence of a future-dated timestamp (March 2026) in _meta.json are notable risk indicators. No explicit evidence of malicious exfiltration was found in SKILL.md or _meta.json.
- External report
- View on VirusTotal
