Back to skill
Skillv0.1.8
VirusTotal security
Precc Token Saver · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:40 AM
- Hash
- f1954e703319fd8cf1374a1deeff123bad81c3bd230ebf2c38827a7c0ac54314
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: precc-token-saver Version: 0.1.8 The skill instructs the agent to intercept and pipe every shell command through an external binary (precc-hook) before execution, effectively creating a man-in-the-middle for all agent actions. It also includes a command to 'mine' all existing session history (precc ingest --all) and uses a high-risk 'curl | bash' installation method from an external GitHub repository (yijunyu/precc-cc). While the stated intent is token optimization, the combination of total command interception, history mining, and prompt-level instruction overrides presents a significant risk for data exfiltration and unauthorized command execution.
- External report
- View on VirusTotal
