Back to skill
Skillv1.0.0
VirusTotal security
clawhub-skill-install · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:40 AM
- Hash
- 72d4c5b452ddf4e1eaefeeb36f15c2ad31c45915b9a7a2bbf6ec2a0ad6721b29
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: clawhub-skill-install Version: 1.0.0 The skill is designed to automate the installation of other skills while explicitly bypassing security warnings using the `--force` flag, even when an installation is 'flagged as suspicious' (scripts/install_skill.sh). This behavior encourages the automated deployment of potentially untrusted code without human oversight. Additionally, SKILL.md contains a hardcoded absolute path specific to a single user's environment (/Users/jaredszhang/...), which is a significant functional flaw.
- External report
- View on VirusTotal