Back to skill
Skillv1.0.1
VirusTotal security
保单照妖镜 - 保单权益保障PK擂台 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 1:41 PM
- Hash
- 9e13325030fa3d02936658e000b7483aa0f072acba6c79ba1ab760e6784da7f2
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: baodan-zhaoyaojing Version: 1.0.1 The skill bundle is designed for insurance policy comparison but requires the AI agent to perform several high-risk actions, including executing shell commands to verify OCR dependencies (e.g., `paddleocr`, `tesseract`), performing real-time web searches on social media and complaint platforms (e.g., Heimao, Weibo), and writing/opening HTML files on the user's desktop. While these capabilities are plausibly necessary for the stated functionality (OCR parsing and reputation analysis), the combination of shell, network, and file system access—directed via instructions in SKILL.md—presents a broad attack surface. No evidence of intentional malice or data exfiltration was found, but the high-privilege nature of the tasks warrants a suspicious classification under the provided guidelines.
- External report
- View on VirusTotal
