Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.

3recommend
3warn against
Nov 14, 2025first mention
Aug 24, 2026latest mention
Nov 25 – Oct 26
Used formalware scanningchecking url for malwarescanning software releaseschecking software for malwarescanning files for false positivesmalware / url scanning

Why people recommend it

“The best I can do is run it against VirusTotal, which I've now done.”

“Beside Virus Total, I am unsure”

Show 1 more

“I always upload a copy to https://www.virustotal.com to help combat the false positives.”

Caveats and dissent

“I'll get caught in loops trying to scan files after only scanning a few where I'll get like 5 absurdly vague captchas in a row.”

“bypass every scanner in their pipeline (VirusTotal, JFrog, ClamAV, picklescan, ModelScan)”

All comments 11

“The best I can do is run it against VirusTotal, which I've now done.”

“I'll get caught in loops trying to scan files after only scanning a few where I'll get like 5 absurdly vague captchas in a row.”

“Beside Virus Total, I am unsure”

“Found under same SHA on VirusTotal too.”

“bypass every scanner in their pipeline (VirusTotal, JFrog, ClamAV, picklescan, ModelScan)”

“I always upload a copy to https://www.virustotal.com to help combat the false positives.”

Adding on here... VirusTotal is flagging the trello skill as suspucious because it Does NOT include an API key? Am i expected to share my keys if I want to upload a skill? https://clawhub.ai/steipete/trello "Requiring TRELLO_API_KEY and TRELLO_TOKEN is appropriate for Trello access, but the registry records no required env vars while SKILL.md documents them. This omission is problematic: the skill will need highly pr

“The URL scanner doesnt directly scan the file.”

Want to chat on discord? Maybe we could combine efforts to try and stop people abusing our services :). We have a few vendors sending us automated reports, maybe I could open it up for multiple projects. feel free to give me a ping on https://discord.gg/AXAbujx @patrick.

“public submissions are available to VirusTotal's paying users”

Threads where it came up

Data: virustotal.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.

Keyboard shortcuts
j / kNext / previous item
o or EnterOpen selected item
/Search
g hHome
g tTop
g rRising
g cCategories
tToggle dark mode
?This help