Back to skill
Skillv1.0.3

VirusTotal security

Raccoon Data Analysis · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:25 AM
Hash
654178d17e493b7766ddf14785f0b8ca90f0f8964008143342c18e35234c1688
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: raccoon-data-analysis Version: 1.0.3 The skill is designed to perform remote data analysis by uploading local user files to a third-party API (xiaohuanxiong.com). While this behavior is explicitly documented and aligned with its stated purpose, the core functionality involves data exfiltration (uploading local files) and the execution of downloaded content via system openers (subprocess.run in scripts/main.py). Furthermore, SKILL.md contains high-priority instructions that explicitly forbid the agent from performing any local analysis, mandating that all user data be sent to the remote service, which increases the risk profile of the bundle.
External report
View on VirusTotal