Back to skill
Skillv1.0.2
VirusTotal security
Claw Portfolio · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:12 AM
- Hash
- 89534789d7ba78791b65c73458d127481b37412eff66253f9c058a401336e828
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: claw-portfolio Version: 1.0.2 The OpenClaw AgentSkills skill bundle implements a portfolio tracker with both CLI and optional web UI. It uses `zod` for robust input validation on all CLI arguments, mitigating shell injection risks. Network calls are exclusively made to legitimate financial data APIs (Yahoo Finance, CoinGecko) for real-time prices and dividend information. File system operations are confined to a local `data/portfolio.json` file for storing user portfolios, without accessing sensitive system files or environment variables. The `SKILL.md` contains no prompt injection attempts. All observed behaviors are aligned with the stated purpose and lack any indicators of intentional harmful actions or significant exploitable vulnerabilities.
- External report
- View on VirusTotal