Back to skill
Skillv1.0.0
VirusTotal security
Self Improvement For All · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 3:58 AM
- Hash
- 57665c3234742b9b7e508b393849d2843f78238f2bde157b5cdb9bd555f495dd
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: adaptive-learning-agents Version: 1.0.0 The skill is generally benign, emphasizing local-only storage and no external network calls. However, the `export_learnings` function in `adaptive_learning_agent.py` allows the `output_file` path to be specified by the caller. This presents a file overwrite vulnerability, as a malicious prompt could instruct the agent to export data to sensitive system files (e.g., `/etc/passwd`), potentially corrupting them. Similarly, the `storage_path` in the constructor could be manipulated. While there is no evidence of intentional malicious behavior within the skill's code or documentation, this vulnerability makes the skill 'suspicious' due to the risk of unintended file system modification if the agent is maliciously prompted.
- External report
- View on VirusTotal