Back to skill
Skillv3.2.0

VirusTotal security

Budget Backpacker · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 10, 2026, 3:56 AM
Hash
93fdcd2687f627f4cb79f17b7bcb3d244ee2e83d9e88936115853c75972fff20
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: budget-backpacker Version: 3.2.0 The skill bundle facilitates travel planning by orchestrating the '@fly-ai/flyai-cli' tool. It contains instructions that mandate the global installation of this npm package (SKILL.md) and implement local persistence by appending execution logs to '.flyai-execution-log.json' (references/runbook.md). While these capabilities are plausibly required for the stated purpose of providing real-time travel data, the requirement for global software installation and direct filesystem writes via shell commands represents a high-risk execution pattern.
External report
View on VirusTotal