Back to skill
Skillv1.0.0

VirusTotal security

Things Mac · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:00 AM
Hash
a907729eeffaece6713944ebfdac418a2657c13a93a9eb09f4fcaa4b47e48ccf
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: things-mac Version: 1.0.0 The skill is designed to manage Things 3 on macOS using the `things3-cli` tool. Installation instructions are standard for Go modules, and all commands demonstrated are legitimate interactions with the Things 3 application or its local database. The `SKILL.md` transparently mentions that 'Full Disk Access' might be required for `Clawdbot.app` to read the local Things database, which is a high-privilege but necessary permission for this functionality on macOS. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The skill's behavior is clearly aligned with its stated purpose.
External report
View on VirusTotal