Back to skill
Skillv1.0.0
VirusTotal security
Auto Create Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:20 AM
- Hash
- 6607baf8a9a57107b957767dbca7efdc2d5866e8fcd2c1178663f2dae0d7fc9c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: auto-create-skill Version: 1.0.0 This skill bundle functions as a 'meta-skill' designed to automatically generate, install, and manage other skills by writing SKILL.md files to the agent's configuration directories (~/.claude/skills/) and executing a bundled Python script (scripts/manage_registry.py). While these actions are aligned with the stated purpose of workflow automation, the capability to programmatically inject new executable instructions into the agent's environment and modify a local registry represents a high-risk behavior that could be exploited for persistence or unauthorized instruction injection.
- External report
- View on VirusTotal