Back to skill
Skillv1.1.0

VirusTotal security

Wafeq API Reference · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:33 AM
Hash
88cc718c33073043c43eef15394b04dde65c19d62130bb59dca1097a1a515d1b
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: wafeq-api Version: 1.1.0 The skill bundle is benign, consisting solely of documentation files (`.md`) and metadata (`_meta.json`) for the Wafeq accounting and e-invoicing API. It describes legitimate API endpoints, schemas, and authentication methods (API key, OAuth2), emphasizing secure handling of API keys via environment variables or OpenClaw configuration. There is no executable code, obfuscation, or explicit prompt-injection attempts within the markdown to instruct an agent to perform malicious actions. The mention of `scripts/setup.sh` in `SKILL.md` is an instruction to the user, but the script itself is not included for analysis.
External report
View on VirusTotal