Back to skill
Skillv1.0.0

VirusTotal security

Shadow AI Monitor · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:23 AM
Hash
bdfb9fde2c56fbe077524757799821fe3c331290264efa82b17d86b5b9cf97eb
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: shadow-ai-monitor Version: 1.0.0 The OpenClaw skill 'shadow-ai-monitor' is designed to generate local HTML dashboards for AI tool usage and compliance. All scripts (`generate_demo_data.js`, `generate_dashboard.js`) perform local file I/O operations (reading/writing JSON and HTML) and calculations without any network requests, external API calls, or execution of arbitrary commands. The `SKILL.md` instructions for the AI agent are aligned with the skill's stated purpose, instructing it to run the local scripts and send a WhatsApp notification with metrics, which is a legitimate use of agent capabilities. While the generated HTML dashboard loads Chart.js from a CDN, this is a standard web development practice for static pages and not a malicious action performed by the skill's Node.js code itself. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection.
External report
View on VirusTotal