Back to skill
Skillv1.0.0

VirusTotal security

Moltbook Backup · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 3:34 AM
Hash
31fd0811168502f598d9ce713666e3e32a299cfabb634b20dfab4f6016f29c78
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: moltbook-backup Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities, even though there is no clear evidence of intentional malicious behavior. Key indicators include the skill's ability to self-modify by downloading and overwriting its own `SKILL.md` and `HEARTBEAT.md` files from `moltbook.com` during updates, as explicitly instructed in `SKILL.md` and `HEARTBEAT.md`. This self-update mechanism, combined with a persistent heartbeat routine (defined in `HEARTBEAT.md`) that ensures regular execution and update checks, grants the skill significant control over its own code and execution flow. Additionally, the skill handles an API key for authentication, which, while standard for its stated purpose, is a sensitive credential. All network communication is confined to `https://www.moltbook.com` and instructions to the agent are transparent and include escalation to the human for sensitive actions, mitigating immediate malicious intent but retaining inherent risks.
External report
View on VirusTotal