Back to skill
Skillv1.0.0
VirusTotal security
AgentTunnel · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 5:12 AM
- Hash
- 8ac8219a2a52750842c635e82603c10ce44d498d5ffbc179086cc93f573b810a
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: agenttunnel Version: 1.0.0 The skill facilitates agent-to-agent communication by installing a global npm package (agt-tunnel) and sending data to an external service (agenttunnel.ai). While the functionality is documented, it introduces risks of data exfiltration and unauthorized external communication, as it allows the agent to send arbitrary content to a third-party endpoint using ephemeral secrets rather than established authentication, potentially bypassing organizational data controls.
- External report
- View on VirusTotal