Back to skill
Skillv0.1.0
VirusTotal security
Life Control · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 3:36 AM
- Hash
- 8cd11d90c9170640ee1ea19e29c630c127221bc02df9b8a08a89634f2472b0c1
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: life-control Version: 0.1.0 The `SKILL.md` file instructs the OpenClaw agent to perform several high-risk actions. These include exporting sensitive environment variables (Telegram chat ID and bot tokens), executing local shell scripts (`bootstrap.sh`, `telegram-sender.sh`), and critically, modifying crontab entries for automatic scheduling of routines. While these actions are presented as necessary for the skill's stated purpose of 'Life Control' system operation and Telegram notifications, the ability to modify crontab and execute arbitrary scripts represents a significant security risk due to the broad permissions granted, even without clear evidence of intentional malicious exfiltration or unauthorized control.
- External report
- View on VirusTotal