virustotal is an AI agent skill, created by aleph8 and published at openclaw/skills. ClawSecure audited virustotal across 4 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 13 findings concentrate in Data Exfiltration, Policy Violation and Unauthorized Tool Use, including Pattern detected: requests.post( and Pattern detected: requests.post(. 7 were rated high or critical severity.
Is virustotal safe?
ClawSecure audited virustotal and assigned a security score of 0/100 (High Risk), identifying 13 findings across Data Exfiltration and Policy Violation. Review the findings below before installing.
What did ClawSecure find in virustotal?
ClawSecure identified 13 findings in virustotal, concentrated in Data Exfiltration, Policy Violation and Unauthorized Tool Use. 7 were rated high or critical severity. The most severe include Pattern detected: requests.post( and Pattern detected: requests.post(.
How was virustotal audited?
ClawSecure ran virustotal through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 4 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned virustotal a security score of 0/100, placing it in the High Risk range. This is driven by 13 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for virustotal
ClawSecure detected 13 security findings in virustotal, spanning Data Exfiltration, Policy Violation, Unauthorized Tool Use and Permissions Manifest.
- critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
vt_client.py:60. - critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
vt_client.py:68. - critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
vt_client.py:83. - critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
vt_client.py:90. - critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/9a4469309c8f0577/vt_client.py. - critical · Multi-file exfiltration chain detected: vt_client.py collect data →.... Data Exfiltration finding.
- critical · Environment variable access with network calls in vt_client.py. Data Exfiltration finding.
- medium · Pattern detected: import requests. Data Exfiltration finding detected in
vt_client.py:7. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/9a4469309c8f0577/vt_client.py. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill name 'virustotal security scanner' is invalid. Agent skills.... Policy Violation finding detected in
SKILL.md.
Showing the 12 highest-severity of 13 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for virustotal
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. virustotal is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.