Back to skill
Skillv0.1.0
VirusTotal security
Ops Framework · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 3:28 AM
- Hash
- 73c9d8ddbdbaf611ca974203ac4b9b8191e452d86a6f0c145c933effa6258f55
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: ops-framework Version: 0.1.0 The skill provides a framework for running arbitrary shell commands via user-defined jobs, which is a high-risk capability. However, the code (`ops-monitor.py`) and agent instructions (`SKILL.md`, `OPS_FRAMEWORK.md`) implement significant security guardrails: write jobs are blocked by default and require explicit approval and a read-only verification step, and the agent is instructed to enforce these controls and seek user confirmation for risky actions. There is no clear evidence of intentional malicious behavior, data exfiltration to unauthorized endpoints, or persistence mechanisms installed by the skill itself. The prompt injection instructions are designed to enhance security and transparency, not bypass them. The inherent risk of executing arbitrary commands, even with strong controls, makes it suspicious rather than benign.
- External report
- View on VirusTotal
