Back to skill
Skillv1.0.0

VirusTotal security

TaskSquad.ai · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:26 AM
Hash
eebdac1a2fb9bdc004b66946427d5d48fbd8cd2905ebe26d7163ad5d80e6a6fa
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: task-squad-ai Version: 1.0.0 The skill documentation (SKILL.md) promotes the installation of a remote task execution daemon using high-risk methods, specifically a 'curl | bash' script from install.tasksquad.ai. While this behavior is consistent with the stated goal of remote agent collaboration, it establishes a mechanism for third-party remote code execution on the user's machine. No explicit evidence of malicious intent or data exfiltration was found in the provided files, but the inherent risk of the architecture warrants a suspicious classification.
External report
View on VirusTotal