Back to skill
Skillv1.0.0

VirusTotal security

smart-hotel-search · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 1, 2026, 1:06 PM
Hash
bd8f2407b11f86346e9732424f3b60b3b17e61d387d3bffe4f2f4e1b5d70eb45
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: smart-hotel-search Version: 1.0.0 The skill bundle requires the AI agent to perform high-risk system-level operations, including the global installation of npm packages (@jackwener/opencli and @fly-ai/flyai-cli) and the configuration of a browser-automation tool (opencli) that relies on a Chrome extension. While these actions are aligned with the stated purpose of searching hotel reviews on Xiaohongshu and booking via FlyAI, the automated installation of third-party software and the granting of browser control capabilities present a significant security risk without being explicitly malicious. These instructions are primarily located in SKILL.md and references/installation.md.
External report
View on VirusTotal