Back to skill
Skillv1.0.4
VirusTotal security
ClawShow-Gateway-Connect · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:07 AM
- Hash
- 6f27a01afa0b9278baf32c10ee224c4e4fc9b3369dc0c28308c2f89a011b4f6d
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawshow-gateway-connect Version: 1.0.4 The skill automates the installation of a third-party plugin (@bowong/clawshow-gateway) and configures a connection to an external relay (wss://clawshow-api.bowong.cc). While SKILL.md includes explicit safety guardrails—such as prohibiting the reading of .env files and requiring backups—it performs high-risk actions including software installation (npm and openclaw plugins) and the configuration of broad access policies (allowFrom: ['*']). The automated setup of remote access via an external service without clear provenance of the provider makes this bundle suspicious.
- External report
- View on VirusTotal