Mal Lookup
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: mal-lookup Version: 1.3.1 The provided `_meta.json` and `SKILL.md` files describe a MyAnimeList lookup tool. The `SKILL.md` specifies the use of standard command-line utilities like `curl`, `jq`, `grep`, and `awk` which are plausible and necessary for a tool that directly queries web endpoints and parses responses. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence, or prompt injection with a malicious objective. The instructions for the AI agent are clearly aligned with the stated purpose of querying MyAnimeList.net.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms, usernames, and list/chart requests may be sent to MyAnimeList when the skill is used.
The skill discloses that it makes direct network requests to MyAnimeList internal endpoints; this is aligned with the lookup purpose but is still worth noticing because user queries are sent externally.
This skill uses MAL's internal `load.json` and `prefix.json` endpoints.
Use it for non-sensitive lookups and avoid entering private or sensitive identifiers as search terms.
The displayed version information may be slightly inconsistent, but there is no evidence of hidden code or unsafe installation behavior.
The registry metadata and SKILL.md frontmatter show different versions, indicating minor packaging drift. No code or install script is present, so this is not a material concern.
Version: 1.3.1 ... SKILL.md: version: 1.3.0
If exact version provenance matters, verify the published package metadata before relying on it.