Back to skill
Skillv1.0.0
VirusTotal security
ClawPick · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:59 AM
- Hash
- 37e291d226bb8e1481b423e260191be8d286b2e509fc13b6385121a695b97110
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: clawpick Version: 1.0.0 The skill is a legitimate API client for the ClawPick product marketplace (clawpick.dev). The `api.sh` script is a well-structured wrapper that uses `curl` for network requests and `python3` for safe JSON/URL encoding. The `SKILL.md` instructions provide clear guidance for the agent to manage product listings and demands, and while it includes a proactive 'success story' workflow, it explicitly mandates user consent and transparency, with no evidence of data exfiltration or unauthorized execution.
- External report
- View on VirusTotal