VirusTotal
First-partyLook up files, URLs, domains, and IP addresses against VirusTotal's aggregated antivirus and threat-intelligence engines.
6 actions First-party pack
Request access
Connect VirusTotal once you're in Boring.
01 · WHAT THE AGENT CAN DO
Actions
Every capability is a discrete, logged action the agent calls by name — scoped to what you authorize and recorded in the run trace.
File reportcustom_virustotal_file_report
Return VirusTotal's report for a file, identified by its MD5, SHA-1, or SHA-256 hash. Use this to check whether a hash is known-malicious and how many engines flag it — read `data.attributes.last_analysis_stats` (malicious / suspicious / harmless / undetected counts). Attribute results to VirusTotal.
URL reportcustom_virustotal_url_report
Return VirusTotal's report for a URL. The `id` is VirusTotal's URL identifier: the URL-safe base64 (no `=` padding) of the URL, OR its SHA-256 — you can obtain the base64 id from a prior submit_url response. Reads `data.attributes.last_analysis_stats` for the detection breakdown.
Domain reportcustom_virustotal_domain_report
Return VirusTotal's report for a domain: reputation, detection stats, WHOIS, categories, and passive-DNS-derived data. Use it to assess whether a domain is malicious. Attribute results to VirusTotal.
IP address reportcustom_virustotal_ip_report
Return VirusTotal's report for an IPv4 or IPv6 address: reputation, detection stats, network/ASN, and country. Use it to assess whether an IP is malicious. Attribute results to VirusTotal.
Submit a URL for scanningcustom_virustotal_submit_url
Submit a URL to VirusTotal for a fresh scan. Returns an analysis id you can poll (and the URL's base64 id for url_report). WARNING: submitted URLs become visible to the VirusTotal community — NEVER submit URLs that contain secrets, session tokens, magic-link credentials, or internal hostnames. This is a write action and pauses for human approval by default.
Search VirusTotalcustom_virustotal_search
Search VirusTotal for files, URLs, domains, or IPs matching a query (a hash, domain, IP, URL, or VT search modifier). Returns matching objects. Attribute results to VirusTotal.
// also in security & identity toolssee all Security & Identity Tools →
1password
Password manager and digital vault for secure credential storage and team collaboration
AbuseIPDB
AbuseIPDB is a project dedicated to helping make the internet safer by providing a central repository for reporting and checking IP addresses associated with malicious activities.
Anonyflow
AnonyFlow offers a simple and powerful service for encryption-based data anonymization and community sharing, enabling GDPR, CCPA, and HIPAA data privacy protection compliance.
Bitwarden
Bitwarden is a secure password management solution providing encrypted vaults, cross-platform sync, and enterprise-grade security tools for storing and sharing credentials