Back to skill
Skillv4.9.0

VirusTotal security

Skill Provenance · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:46 AM
Hash
138cf5db8b47501c1b50923c68f8facd76b39b87a7d3b9237ac0034dbe3f2ebe
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: skill-provenance Version: 4.9.0 The 'skill-provenance' bundle is a meta-skill designed for versioning and manifest management of AgentSkills. It includes two bash scripts, 'package.sh' and 'validate.sh', which perform local file operations (copying, hashing, and text processing via awk) to maintain bundle integrity and create platform-specific distributions. The instructions in 'SKILL.md' define a clear protocol for the agent to manage version headers and changelogs without any evidence of malicious intent, data exfiltration, or unauthorized remote execution. All behaviors are strictly aligned with the stated purpose of providing a provenance system for skill bundles.
External report
View on VirusTotal