Back to skill
Skillv1.0.3

VirusTotal security

Claw Roam · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:29 AM
Hash
ebf6757be876d04f6a4946563f372422ca1dceb2a1621880257f586bf9abf540
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: claw-roam Version: 1.0.3 The OpenClaw AgentSkills skill bundle 'claw-roam' is designed for syncing an OpenClaw workspace via Git. All operations performed by the `claw-roam.sh` script are standard Git commands (`git add`, `git commit`, `git push`, `git pull`, `git merge`, `git fetch`) and are strictly confined to the `~/.openclaw/workspace` directory. The `SKILL.md` documentation provides clear instructions for setup and usage, including an optional cron job example for automated syncing. While a cron job is a form of persistence, it is explicitly documented, user-initiated, and serves a legitimate purpose for the skill, not as a hidden backdoor or for malicious intent. There is no evidence of data exfiltration, malicious execution, unauthorized remote control, or obfuscation.
External report
View on VirusTotal