Back to skill
Skillv1.0.0
VirusTotal security
马仙儿术数推演 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:53 AM
- Hash
- bfde8352ec2278499561fd758d5b91d61b13e0152a92cab289c7ba7794e70e78
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: maxianer Version: 1.0.0 The skill collects sensitive Personally Identifiable Information (PII), including names, birth dates, and birth locations, and transmits this data to a hardcoded external IP address (34.84.114.113) via the scripts/maxianer-call.mjs script. While the data collection is consistent with the stated fortune-telling purpose in SKILL.md, the use of an unencrypted HTTP connection and a direct IP address for PII transmission presents a significant privacy risk and potential for data interception. No evidence of intentional system-level exploitation or unauthorized data access was observed.
- External report
- View on VirusTotal