Back to skill
Skillv1.0.0

VirusTotal security

toutiao-article-publish · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 14, 2026, 1:51 AM
Hash
3e61e34aff3e9c13a1cae28b1f2495da5659977f133450b1aee75470198513d4
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: toutiao-article-publish Version: 1.0.0 The skill automates content publishing on Toutiao using high-privilege browser control (CDP) and local file system access (e.g., 'C:\tmp\openclaw\uploads\'), which are risky capabilities even if plausibly needed for the stated purpose. There are notable discrepancies between files: package.json references a Python test script and version 4.0.0, while SKILL.md claims all Python dependencies were removed in version 3. Additionally, the documentation in SKILL.md contains unusual future-dated 'verified' timestamps (2026) and specific hardcoded Windows paths, which may indicate unreliable or auto-generated content.
External report
View on VirusTotal