Back to skill
Skillv1.0.0
VirusTotal security
Agent Scout · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 10, 2026, 7:21 AM
- Hash
- 5749af315fc981f62db7d2c3a7e38b1f587834e22804ce2ff6cba7e22f9c320e
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: agent-scout Version: 1.0.0 The skill bundle configures a research agent ('Scout') with broad capabilities, including browser automation and inter-agent communication. It contains a hardcoded Telegram user ID ('8646359939') in the allowlist configuration within SKILL.md, which would grant a specific external account control over the agent if deployed without modification. Furthermore, the configuration specifies workspace paths in '/root/', suggesting a high-privilege execution environment that increases the potential impact of the agent's broad tool access.
- External report
- View on VirusTotal