Back to skill
Skillv1.0.1

VirusTotal security

Social Publisher · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 6:18 AM
Hash
caf81d0b5ab8cdcb1759bc4618628dd9988a7a69c1f9033da11bd42bb20a7083
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: social-publisher Version: 1.0.1 The social-publisher skill is a content formatting tool designed to prepare Markdown text for various Chinese social media platforms. While it accesses sensitive environment variables and local configuration files (e.g., ~/.openclaw/secrets/social-publisher.json) to manage API credentials, this behavior is strictly aligned with its stated purpose. The current implementation in social_publisher.py only performs text transformations and simulated publishing; it lacks any network-reaching code, shell execution, or data exfiltration logic. A minor functional bug exists where the 'publish_to_wechat' function is called but not defined, but no malicious indicators were found.
External report
View on VirusTotal