Back to skill
Skillv1.0.6
VirusTotal security
UpKuaJing Company and People Search · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 17, 2026, 12:21 PM
- Hash
- 200d5c543e9a8b803a03ab5a4128e329ecc43b3f3a7eb646047bd872d3e3c3f6
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: upkuajing-company-people-search Version: 1.0.6 The skill bundle provides a legitimate interface for the UpKuaJing (跨境魔方) business and people search API. It includes scripts for searching entities, retrieving contact details, and managing account balance. Security practices are observed, such as validating task IDs using UUID checks to prevent path traversal in `common.py` and requiring explicit user confirmation for fee-incurring API calls in `SKILL.md`. A version check mechanism in `version_check.py` notifies users of updates via standard error without auto-execution. No evidence of data exfiltration, malicious execution, or prompt injection was found.
- External report
- View on VirusTotal