Back to skill
Skillv1.0.1

VirusTotal security

保单照妖镜 - 保单权益保障PK擂台 · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 28, 2026, 1:41 PM
Hash
9e13325030fa3d02936658e000b7483aa0f072acba6c79ba1ab760e6784da7f2
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: baodan-zhaoyaojing Version: 1.0.1 The skill bundle is designed for insurance policy comparison but requires the AI agent to perform several high-risk actions, including executing shell commands to verify OCR dependencies (e.g., `paddleocr`, `tesseract`), performing real-time web searches on social media and complaint platforms (e.g., Heimao, Weibo), and writing/opening HTML files on the user's desktop. While these capabilities are plausibly necessary for the stated functionality (OCR parsing and reputation analysis), the combination of shell, network, and file system access—directed via instructions in SKILL.md—presents a broad attack surface. No evidence of intentional malice or data exfiltration was found, but the high-privilege nature of the tasks warrants a suspicious classification under the provided guidelines.
External report
View on VirusTotal