Back to skill
Skillv0.5.5
VirusTotal security
Billclaw · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:33 AM
- Hash
- 73f28f01b6131bb11f3e453955a4d1724915c18e572a85b106188c469e99b158
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: billclaw Version: 0.5.5 The skill bundle, including SKILL.md, SECURITY.md, and the validation script, presents as a transparent, security-conscious financial management tool. Key indicators for this classification are the explicit `disable-model-invocation: true` in SKILL.md, which prevents autonomous agent execution, and strong claims in both SKILL.md and SECURITY.md regarding 'local-first' data storage, 'no data exfiltration', and user-controlled credentials stored in the system keychain. The documentation directly addresses common security concerns like transitive dependencies and sensitive API requirements, explaining them as non-malicious and necessary for functionality. There is no evidence of prompt injection attempts, obfuscation, or malicious code within the provided files; instead, they promote auditable, open-source practices.
- External report
- View on VirusTotal