Back to skill
Skillv1.0.2

VirusTotal security

Env Guard · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:37 AM
Hash
f8992f3c77b3620297e5e5cf9a1a77a02270467cc20e8196fd7b9a8edb2350c3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: env-guard Version: 1.0.2 The EnvGuard skill is a legitimate local secret scanner designed to identify leaked API keys, passwords, and tokens within a filesystem. The implementation in `src/env-guard.js` uses standard Node.js modules (`fs`, `path`) to recursively scan files against a set of regex patterns, and it includes a redaction mechanism to prevent full secrets from being displayed in logs. There is no evidence of data exfiltration, network activity, or malicious instructions in `SKILL.md` or the source code.
External report
View on VirusTotal