openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

False positive VirusTotal 'Suspicious' flag on everclaw-inference skill #197

New Issue
Open
opened 2026-02-15 17:16:09 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:16:09 -05:00
Owner
Copy Link
Copy Source

Originally created by @profbernardoj on GitHub (Feb 15, 2026).

Skill

Issue

The skill is flagged as "Suspicious" by VirusTotal Code Insight on ClawHub.

Why this is a false positive

Everclaw connects OpenClaw agents to the Morpheus decentralized inference network (MIT license). The patterns triggering the flag are core functionality:

1. Wallet/key management (everclaw-wallet.mjs) — Retrieves private keys from macOS Keychain at runtime via security find-generic-password. Keys are never stored on disk — 1Password/Keychain only. Used for MOR token staking.

2. Network calls (morpheus-proxy.mjs, bootstrap-gateway.mjs, x402-client.mjs) — Proxy connects to Morpheus P2P network (provider.mor.org, api.mor.org). x402 client signs USDC payments via EIP-712. All legitimate blockchain endpoints on Base mainnet.

3. Base64-encoded API key (bootstrap-gateway.mjs) — Community API key encoded to prevent scraping, not to hide malicious intent. For the free Morpheus API Gateway beta, publicly documented.

4. Shell scripts with curl/exec (install.sh, gateway-guardian.sh, diagnose.sh) — Install scripts download from official GitHub releases. Guardian monitors health via HTTP probes. Diagnose.sh is read-only.

5. Bundled security skills (security/ directory) — SkillGuard, ClawdStrike, PromptGuard, Bagman are security tools that scan for malicious patterns. Their pattern-matching definitions may trigger the scanner on our own security code.

Full transparency

  • All source: https://github.com/profbernardoj/everclaw (167+ commits, full git history)
  • Includes its own security scanner (SkillGuard)
  • Full metadata declarations for all env vars, credentials, network endpoints, persistence services

Scaling idea

Would it help if skills could include a .virustotal-allowlist or annotation file explaining flagged patterns? Happy to PR something if there is interest in a structured way for skill authors to document why certain patterns exist.

Request

Please review the scan and unflag if appropriate. Happy to answer questions or adjust code to reduce false positives.

(Originally misfiled as openclaw/openclaw#17220, now closed.)

Originally created by @profbernardoj on GitHub (Feb 15, 2026). ## Skill - **Name:** everclaw-inference - **Version:** 0.9.7 (on ClawHub; v0.9.8 on GitHub) - **Author:** @DavidAJohnston (profbernardoj) - **ClawHub URL:** https://clawhub.ai/DavidAJohnston/everclaw-inference - **GitHub:** https://github.com/profbernardoj/everclaw ## Issue The skill is flagged as "Suspicious" by VirusTotal Code Insight on ClawHub. ## Why this is a false positive Everclaw connects OpenClaw agents to the Morpheus decentralized inference network (MIT license). The patterns triggering the flag are core functionality: **1. Wallet/key management (everclaw-wallet.mjs)** — Retrieves private keys from macOS Keychain at runtime via `security find-generic-password`. Keys are never stored on disk — 1Password/Keychain only. Used for MOR token staking. **2. Network calls (morpheus-proxy.mjs, bootstrap-gateway.mjs, x402-client.mjs)** — Proxy connects to Morpheus P2P network (`provider.mor.org`, `api.mor.org`). x402 client signs USDC payments via EIP-712. All legitimate blockchain endpoints on Base mainnet. **3. Base64-encoded API key (bootstrap-gateway.mjs)** — Community API key encoded to prevent scraping, not to hide malicious intent. For the free Morpheus API Gateway beta, publicly documented. **4. Shell scripts with curl/exec (install.sh, gateway-guardian.sh, diagnose.sh)** — Install scripts download from official GitHub releases. Guardian monitors health via HTTP probes. Diagnose.sh is read-only. **5. Bundled security skills (security/ directory)** — SkillGuard, ClawdStrike, PromptGuard, Bagman are security tools that scan for malicious patterns. Their pattern-matching definitions may trigger the scanner on our own security code. ## Full transparency - All source: https://github.com/profbernardoj/everclaw (167+ commits, full git history) - Includes its own security scanner (SkillGuard) - Full metadata declarations for all env vars, credentials, network endpoints, persistence services ## Scaling idea Would it help if skills could include a `.virustotal-allowlist` or annotation file explaining flagged patterns? Happy to PR something if there is interest in a structured way for skill authors to document why certain patterns exist. ## Request Please review the scan and unflag if appropriate. Happy to answer questions or adjust code to reduce false positives. *(Originally misfiled as openclaw/openclaw#17220, now closed.)*
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#197
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?