Back to skill
Skillv1.0.0

VirusTotal security

Zotero · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:11 AM
Hash
dcc0b95fb2ddaee1e36931bb787568e6e0b4f3fccd43b2b3a541712ebd034af3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: zotero Version: 1.0.0 The OpenClaw Zotero skill is benign. The Python script uses only standard library modules, significantly reducing supply chain risk. All network interactions are with legitimate Zotero, CrossRef, Unpaywall, Semantic Scholar, and DOI resolution APIs, aligning perfectly with the stated purpose of managing academic references. The skill implements robust input validation for DOIs, ISBNs, and item keys, and includes safe defaults like 'trash-by-default' for deletions and 'dry-run' for bulk operations (`find-dois`, `fetch-pdfs`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in any of the analyzed files.
External report
View on VirusTotal