Back to skill
Skillv1.0.0
VirusTotal security
Generate Daily Sports Update · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:02 AM
- Hash
- 619dcbcdf2e9e98d6c9c90f6ced05d300cf56e189b80d6ce0304af0255f3f6b4
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: generate-daily-sports-update Version: 1.0.0 The skill bundle instructs the AI agent to execute an external Python script (`daily_sports_update.py`) and install dependencies from a `requirements.txt` file, neither of which are included in the provided skill bundle. This reliance on unverified local files, combined with the use of the `run_command` tool, creates a significant vulnerability (local file inclusion/arbitrary script execution risk) where a compromised `daily_sports_update.py` or `requirements.txt` could lead to arbitrary code execution on the host system. This is a design flaw that allows for potential attacks, classifying it as suspicious rather than malicious, as there's no direct evidence of intentional harmful behavior within the provided `SKILL.md`.
- External report
- View on VirusTotal