Back to skill
Skillv1.0.3
VirusTotal security
Clawhub Search & Verify · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:17 AM
- Hash
- e282f7c1a638410a7957165fa5e33e3f9c35ad8d1c14b17cdf8039a20d258bf9
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawhub-search-verify Version: 1.0.3 The skill is classified as suspicious due to significant discrepancies between its `SKILL.md` documentation and the `cli-wrapper.sh` implementation. The `SKILL.md` explicitly instructs the AI agent to "run `clawhub install <slug>` on approval," which is not implemented in the provided shell script, creating a high risk of prompt injection where the agent might execute arbitrary installations. Furthermore, `SKILL.md` falsely claims "no filesystem write" capability, directly contradicted by `cli-wrapper.sh` writing user search terms to `logs/clawhub-search.log`, misrepresenting the skill's actual permissions and behavior.
- External report
- View on VirusTotal