Back to skill
Skillv1.0.4
VirusTotal security
Skills.sh Search · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:03 AM
- Hash
- 253b416ac7cec8f067937875ed177d4c29a9dce873ec80042632ea98e0b550be
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: skills-search Version: 1.0.4 The skill bundle is benign. Its primary function, as implemented in `cli.js`, is to query the official `https://skills.sh/api/skills` endpoint to search for and display skills. The `SKILL.md` instructions guide the agent on how to use this search functionality and subsequently install other skills using `npx skills add`, which is a legitimate follow-up action for a skill search tool. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts to mislead the agent into harmful actions. The `ls` command is for verifying installation, not exfiltration.
- External report
- View on VirusTotal