Back to skill
Skillv1.0.0

VirusTotal security

Skill Sandbox · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:19 AM
Hash
07dc69182f0f22e36dbb4f6688faa9508c7b7b501a97d2ccac0138eb57481f92
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: skill-sandbox Version: 1.0.0 The skill-sandbox bundle is a security utility designed to audit and sandbox other OpenClaw skills before installation. The primary script, scripts/skill-sandbox.sh, implements a multi-layered static analysis pipeline that checks for dangerous code patterns (eval, shell execution), sensitive data access (env vars, keys), and risky instructions in SKILL.md. While the script performs file system operations like directory deletion and movement, these actions are strictly aligned with its stated purpose of managing a staging and quarantine workflow to prevent supply chain attacks.
External report
View on VirusTotal