Back to skill
Skillv1.0.5
VirusTotal security
OpenClaw Bot Dashboard · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:12 AM
- Hash
- 01f0b92deef4ce0334feac9b02377895cc9658797f3b2ac229ca15e6ced0e13f
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: openclaw-bot-dashboard Version: 1.0.5 The skill automates the download and execution of a remote web dashboard from GitHub (xmanrui/OpenClaw-bot-review), including running 'npm install' and 'npm run dev' in the background. It performs high-risk operations such as killing processes on port 3000 and retrieving the system's LAN IP address. While these actions are aligned with the stated purpose in SKILL.md, the combination of remote code execution, background persistence, and broad shell command usage across multiple operating systems constitutes a significant security risk.
- External report
- View on VirusTotal
