vt-insight SKILL.md skillC
vt-insight from lingggao/lgsrc is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add lingggao/lgsrc/vt-insight@git:20260408.441cbefPins git:20260408.441cbef in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 14 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- lingggao/lgsrc
- Path
vt-insight/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260408.441cbef, committed Apr 8, 2026
- First version recorded
- Mar 29, 2026
- Size
- 7,823 bytes
- Repository stars
- 15
- License
- CC-BY-SA-4.0
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
vt-insight_OpenClaw_Skill_ZH-CN
请将本文档作为 Skill 在 OpenClaw 中安装。
https://clawhub.ai/Lingggao/vt-insight
名称：vt-insight
作者：Ling Gao (https://github.com/Lingggao)
Skill 版本：1.8.6
2026 年 3 月 19 日
LGHUB · Security Response Center (LGSRC)
作者拥有本技能的所有权，并声明同意遵循 MIT-0 许可协议进行发布。
The author holds the rights to this skill and agrees to publish it under MIT-0.
# VirusTotal 样本查询
根据用户提供的 SHA256 / MD5，自动在 VirusTotal 平台查询样本信息。
1. 检测统计：测试了哪些反病毒引擎，其中多少个报毒
2. 家族标签：各杀毒软件厂商普遍判定的恶意软件家族
3. 文件名称：样本首次提交时的原始文件名
4. 分析信息：提取对安全研究员有价值的信息
## 使用方式
用户输入 `vt-insight {hash} [key {api key}]` 即可自动查询并格式化输出查询报告。
{hash} 与 [{api key}] 间用空格分隔，{api key} 必须用中括号 “[]” 括住。示例：`vt-insight 01234 [key 56789]`
如果用户未提供 {api key}，则使用浏览器自动化。
## 工具依赖
首次安装本技能时，AI 模型必须先向用户明确提示法律风险，然后建议用户优先使用 VirusTotal API Key 查询信息。如果用户未提供 API Key，则使用浏览器自动化拉取信息。
1. 使用 VirusTotal API Key 查询信息 (优先)
- 需要先行取得用户的私人 API Key
- 按照下方 “要求 7” 认真研读 VirusTotal 官方文档
- 按照下方 “要求 9” 查询全部所需信息
2. 使用浏览器自动化拉取信息 (备选)
- 需要浏览器自动化 (不登录、无 Cookie)
- 访问 https://www.virustotal.com/gui/search/{hash}
- 如果自动化点击受阻，尝试解析页面中的 JSON 数据结构与静态内容
…Read the whole file at its exact version.
How to install
mdr add lingggao/lgsrc/vt-insight@sha256:5cb945924d4b0a99The line at the top of this page pins the label git:20260408.441cbef, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ptpvke2ewisej76g)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Mar 29, 2026 and Apr 8, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260408.441cbef latest | 2026-04-08 | 441cbef | 7,823 B | C | view · diff |
| git:20260408.ee1cdb2 | 2026-04-08 | ee1cdb2 | 7,823 B | C | view · diff |
| git:20260406.01cdc22 | 2026-04-06 | 01cdc22 | 7,649 B | C | view · diff |
| git:20260331.45905b0 | 2026-03-31 | 45905b0 | 7,491 B | C | view · diff |
| git:20260329.d03b262 | 2026-03-29 | d03b262 | 7,483 B | C | view |
Audit of the latest version
- fail: Frontmatter block present
- fail: Frontmatter declares a name
- fail: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7823 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
lingggao/lgsrc · 15 stars · license CC-BY-SA-4.0 · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ptpvke2ewisej76g GET https://markdownregistry.com/api/v1/resolve?ref=lingggao/lgsrc/vt-insight GET https://markdownregistry.com/api/v1/blob/5cb945924d4b0a99b21fef6211ae9bba07c10456266892b8a36d6d1221f5c9be
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.