Back to skill
Skillv1.0.1

VirusTotal security

Youtube Lecture Analyzer · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 4:47 AM
Hash
2c690130eb4656b937bc2a31594bb2a26739813cc02bb8ab4ecc8dca07d97886
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: bradford-lecture-analyzer Version: 1.0.1 The skill explicitly configures an HTTP/HTTPS proxy to `http://127.0.0.1:26739` in `scripts/analyze_lecture.py` and lists it as a dependency in `SKILL.md`. This forces all network traffic from the skill to be routed through a local proxy. While there is no direct evidence of malicious intent such as data exfiltration to a remote server, backdoors, or prompt injection with harmful objectives, this unusual network configuration creates a significant vulnerability. A co-located malicious process could potentially intercept, log, or tamper with the skill's network communications, making it suspicious rather than benign.
External report
View on VirusTotal