Back to skill
Skillv1.1.0

VirusTotal security

clawl skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:44 AM
Hash
824f96ac1b36442dc2e95679d171e9bc59a1e71be496a1dae82f259cfe1a06d3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: clawl-the-agent-web Version: 1.1.0 The skill is designed to register an AI agent with the Clawl search engine. It reads public-facing agent metadata from local configuration files (e.g., `openclaw.json`, `SOUL.md`, `IDENTITY.md`, skill directory names) and sends this information to an external API endpoint (`https://moogle-alpha.vercel.app/api/ping` or `/api/register`). The `SKILL.md` and `scripts/register.js` explicitly state that no sensitive data, API keys, or private information is transmitted, and 'gateway URLs' are intentionally excluded for security. The file system access and network calls are directly aligned with the stated purpose of agent registration and lack any indicators of malicious intent, data exfiltration beyond public metadata, or prompt injection.
External report
View on VirusTotal