Back to skill
Skillv1.0.0
VirusTotal security
Skill Lookup · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:16 AM
- Hash
- 0551d157d8382c0376952d778fd9505992355a421dd835cfef7716b4a8a088ce
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: skill-lookup-tool Version: 1.0.0 The skill functions as a package manager that enables the agent to search, retrieve, and install third-party skills from the prompts.chat registry. The instructions in SKILL.md direct the agent to download remote files and write them directly to the local filesystem (.claude/skills/), which constitutes a high-risk 'downloader' pattern. While this behavior is aligned with the tool's stated purpose, it creates a significant security risk by facilitating the installation of potentially unverified remote code.
- External report
- View on VirusTotal