Back to skill
Skillv1.0.1
VirusTotal security
WSL-PowerShell Controller · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:55 AM
- Hash
- 5f7668c6e4be4af506fefe78c224b6ee6226a8de204c72c66e23a8bf2ce4ea29
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: wsl-powershell Version: 1.0.1 The skill provides a wrapper script (psctl.sh) and instructions (SKILL.md) to execute arbitrary PowerShell commands on the Windows host from a WSL environment. While this aligns with the stated purpose, the capability to run host-level commands, including the use of '-ExecutionPolicy Bypass' when piping scripts, constitutes a high-risk interface that could be exploited if the agent is misdirected. No evidence of intentional malice, data exfiltration, or hardcoded backdoors was found.
- External report
- View on VirusTotal