Back to skill
Skillv1.0.0
VirusTotal security
Metal Price · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:28 AM
- Hash
- 6f050de9d8aec9ffc7cb3157e16be670c547b5f80d54a8b4236c387067103dcd
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: metal-price Version: 1.0.0 The skill is classified as suspicious due to two key vulnerabilities found in SKILL.md: hardcoded login credentials (username and password) for the target website, and a hardcoded, specific user desktop path (`C:\Users\wangxiang\Desktop\阶跃产出结果\Excel文件`) for saving the output Excel file. While the skill's stated purpose of web scraping metal prices is benign, these practices introduce security risks (e.g., credential exposure, potential permission issues or unintended file placement) without clear evidence of intentional malicious behavior like data exfiltration or system compromise.
- External report
- View on VirusTotal