Back to skill
Skillv1.4.0
VirusTotal security
Squad Control · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 4:34 AM
- Hash
- 8eda819ee104db6c1654893b67bc37a1e1deeeadd4464b3cc1a8c77165225a40
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: squad-control Version: 1.4.0 The squad-control skill is a high-privilege orchestration tool designed to automate agent workflows, including cloning private repositories, spawning sub-agents, and performing automated git merges. While its behavior is aligned with the stated purpose of integrating with squadcontrol.ai, it possesses significant high-risk capabilities: it fetches task descriptions and agent personas ('soulMd') from a remote API to dynamically generate prompts for sub-agents, and it includes logic for automated PR merging and 'stuck task' recovery. These features, primarily defined in SKILL.md and executed via scripts/poll-tasks.sh and scripts/poll-parser.py, create a large attack surface for remote prompt injection and unauthorized code modification if the remote API is compromised.
- External report
- View on VirusTotal