Back to skill
Skillv1.0.6
VirusTotal security
UpKuaJing Customs Trade Company Search · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 17, 2026, 11:56 AM
- Hash
- 8523c74d492a43c0cd7a170b1e1cc1fff97e608fc9508c366243e15aef90c26c
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: upkuajing-trade-company-search Version: 1.0.6 The skill bundle provides a legitimate interface for searching global trade and company data via the UpKuaJing (跨境魔方) Open Platform API. The scripts (scripts/*.py) implement standard API interaction patterns, including authentication via an API key stored in ~/.upkuajing/.env, cursor-based pagination for large datasets, and local task logging. Security measures are present, such as UUID validation and path normalization in common.py to prevent path traversal during task management. The SKILL.md instructions correctly guide the AI agent on handling fee-based operations and API key setup without any evidence of prompt injection or malicious intent. All network activity is directed to the official domain (openapi.upkuajing.com).
- External report
- View on VirusTotal