Back to skill
Skillv1.1.2
VirusTotal security
Swiss Phone Directory · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:02 AM
- Hash
- 0fff3e2173992e24b73a1dbfbf65c9489c58cf0b1bbcb9d2f334c863f65c0ed7
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: swiss-phone-directory Version: 1.1.2 The OpenClaw skill 'swiss-phone-directory' is benign. It securely retrieves an API key from environment variables (`SEARCHCH_API_KEY`) and uses `urllib.parse.urlencode` to safely construct API requests to a hardcoded `search.ch` endpoint, preventing URL injection. XML parsing uses `xml.etree.ElementTree`, which is generally safe against XXE by default, and the XML source is a trusted API. There are no signs of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent in `SKILL.md`. All functionality aligns with its stated purpose of searching a Swiss phone directory.
- External report
- View on VirusTotal