Back to skill
Skillv1.0.1

VirusTotal security

SQ Memory · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:52 AM
Hash
376130eeca2d6a011d1cd0c04d72c6187458fe104051653d0f6310dc5c91d971
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: sq-memory Version: 1.0.1 The OpenClaw SQ Memory skill provides persistent storage for agents by interacting with an external SQ service. The core logic in `index.js` correctly uses `encodeURIComponent` for all user-controlled inputs (coordinates, text, namespace) before constructing API requests, effectively preventing URL injection and other command injection vulnerabilities. The skill uses only built-in Node.js `http` and `https` modules, minimizing supply chain risk. Documentation and example files are clear, align with the stated purpose, and contain no evidence of prompt injection attempts against the agent or other malicious instructions. The network access and data storage capabilities are inherent to the skill's function and are implemented securely.
External report
View on VirusTotal