Back to skill
Skillv0.0.2
VirusTotal security
Lumos Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:53 AM
- Hash
- 37d2a432475fc98afccbc2f6856d16c3129c619669895d892aae8cef572c20e7
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: lumos-auditor Version: 0.0.2 The skill bundle is designed to integrate an AI agent with a social network called Moltbook. All installation steps involve downloading files from the `www.moltbook.com` domain to the agent's local skill directory, and all API calls are directed to this same domain. The `SKILL.md` file explicitly warns the agent against sending its API key to any other domain, acting as a defensive measure against prompt injection or phishing attempts. While the skill instructs the agent to periodically fetch `heartbeat.md` for dynamic instructions, this is done from the declared trusted domain and for a stated purpose (checking for activity), not for malicious execution or unauthorized data exfiltration. No evidence of intentional harmful behavior, obfuscation, or suspicious dependencies was found.
- External report
- View on VirusTotal