Back to skill
Skillv1.0.7
VirusTotal security
tw fashion social manager · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 26, 2026, 1:41 PM
- Hash
- f51d69c161ad02cc05103395f023166c0b2b54555e1b08ddc08cd6955601cd68
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: tw-fashion-social-manager Version: 1.0.7 The skill bundle contains hardcoded absolute paths to a specific local user's directory (/Users/shangweilin/) in SKILL.md, which is highly irregular for a portable skill. It includes instructions to grep and export secrets from a local .env file and execute a Python script (fetch_insights.py) that interacts with Meta APIs. While the script's logic appears aligned with its stated purpose of fetching social media analytics, the reliance on specific local file structures and the manual handling of environment variables via shell commands represent a significant security risk and poor isolation.
- External report
- View on VirusTotal