Back to skill
Skillv1.0.0

VirusTotal security

Segment Anything · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:18 AM
Hash
5e38e7f0d212794de1657ace9a8ccc38a18027a5df247409542040acc082b6f7
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: sam Version: 1.0.0 The skill performs image segmentation using Meta's SAM model but exhibits high-risk behaviors, including the use of `os.system` in `scripts/segment.py` to install dependencies from a remote Git repository and the automatic downloading of large binary checkpoints (up to 2.5GB) from `dl.fbaipublicfiles.com`. While these actions are aligned with the stated purpose in `SKILL.md`, the use of shell execution for package management and unverified remote file retrieval are significant security vulnerabilities.
External report
View on VirusTotal