Back to skill
Skillv0.1.5
VirusTotal security
Create Agent With Telegram Group · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 4:17 AM
- Hash
- e6506b96674d33c64370a7e9394522f7c15a21c719890671e3523464788102c9
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: create-agent-with-telegram-group Version: 0.1.5 The skill bundle is benign. The `SKILL.md` explicitly instructs the AI agent to require user confirmation before performing high-privilege actions (modifying `openclaw.json`, browser automation, restarting gateway) and forbids copying authentication files or inventing commands. The Python scripts (`scripts/init_workspace.py`, `scripts/provision_config.py`) implement robust path validation (`validate_path_within`) to prevent arbitrary file writes and path traversal, ensuring all operations are confined to the user's home directory. User inputs are sanitized (`norm_agent_id`) or safely embedded as string values in JSON, with no evidence of malicious execution, data exfiltration, or persistence mechanisms.
- External report
- View on VirusTotal