Back to skill
Skillv1.0.0

VirusTotal security

博查搜索 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:44 AM
Hash
efe0b97f25df82a404be58373a009d8154cafb4407ffbbabafb0002b58c09afa
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: bocha-search Version: 1.0.0 The skill bundle provides a client for the Bocha Search API. The `SKILL.md` file contains clear instructions for configuration and usage without any prompt injection attempts. The `scripts/search.js` script correctly implements the search functionality, securely loading the API key from environment variables or a local `config.json` file, and making HTTPS requests to the specified `https://api.bocha.cn/v1/web-search` endpoint. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other high-risk behaviors beyond its stated purpose.
External report
View on VirusTotal