Back to skill
Skillv0.0.1
VirusTotal security
Ghost Catalog - Semantic File Organization · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:53 AM
- Hash
- 6d72a0a3577a482122baa2bb564d6d05111a172faaf841ac5a0139e2f0aa7f03
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ghostcatalog Version: 0.0.1 The 'ghost-catalog' skill is designed for local file system scanning, tagging, and cataloging, storing metadata in a local SQLite database. While it requires extensive file system read/write access, the `SKILL.md` explicitly instructs the agent to 'use the Glob and Read tools rather than spawning processes' for scanning, which is a critical measure against shell injection vulnerabilities. Furthermore, it states the goal is to 'catalog project files only -- no dependencies, no build artifacts, no binaries, no secrets, no lock files,' indicating an intent to avoid sensitive data. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or harmful prompt injection attempts against the agent. The skill's operations are clearly aligned with its stated purpose and include instructions for secure implementation.
- External report
- View on VirusTotal