Back to skill
Skillv1.0.0

VirusTotal security

Correios Rastreio · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:07 AM
Hash
37b30fe7d792a2cd4afcbbd4df78d97823e0f6a9ceea816f12c10d57bf45c8a6
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: correios-rastreio Version: 1.0.0 The skill is a legitimate tool for tracking Brazilian postal service (Correios) packages using their official API (api.correios.com.br). It handles authentication via an environment variable and maintains a local history/favorites file (src/data.json). While there is a minor coding bug in src/index.js (an undefined variable 'ultimohora' in the output formatting), there are no signs of malicious intent, data exfiltration, or prompt injection.
External report
View on VirusTotal