Back to skill
Skillv0.1.0

VirusTotal security

last30days-surf · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 11:26 PM
Hash
d45ae51f9cd042ba91883d640a52161714d29e2753b5e18bcf6e3e3e605d6d43
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: last30days-surf Version: 0.1.0 The last30days-surf skill is a legitimate research tool designed to aggregate and synthesize social media and web data. It demonstrates high security maturity by implementing a mandatory '<untrusted_content>' fence in 'lib/rerank.py' to protect the agent from prompt injection via scraped data. The codebase includes proactive security measures such as file permission checks for configuration files in 'lib/env.py' and clear instructions in 'SKILL.md' for the agent to treat external content as data rather than instructions. All external communication is routed through hardcoded, purpose-aligned endpoints (e.g., surf.cascade.fyi), and the use of subprocesses is limited to standard CLI integrations like 'gh auth token'.
External report
View on VirusTotal