Back to skill
Skillv1.0.4
VirusTotal security
find-skills-in-tencent-skillhub · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 6:04 AM
- Hash
- da6b52190d74e67896d24414c3f247862a2d5dccf16eec9518ef6ffe229dad3c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: find-skills-in-tencent-skillhub Version: 1.0.4 The skill acts as a package manager for OpenClaw skills, providing capabilities to search, install, and upgrade external code via the 'skillhub' CLI. While the wrapper script 'scripts/usage.sh' implements defensive coding practices like input validation and safe command execution to prevent shell injection, the inherent nature of a tool that manages and executes third-party code is a high-risk capability. Additionally, the 'SKILL.md' documentation directs users to download the core CLI binary from an external Tencent Cloud bucket (skillhub-1388575217.cos.ap-guangzhou.myqcloud.com).
- External report
- View on VirusTotal