Back to skill
Skillv1.0.0
VirusTotal security
Shadow Number · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 4:28 AM
- Hash
- 62b4138732c6b1219ab00125f2ed3450af5f2e592ff42194104ad1ef56652f30
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: shadow-phone Version: 1.0.0 This skill is classified as suspicious due to its instruction for the AI agent to automatically handle x402 crypto payments using the `SHADOW_WALLET_KEY` environment variable. While this is stated as part of the skill's functionality, instructing an agent to automatically spend user funds via a third-party API (`https://extraordinary-charisma-production.up.railway.app`) without explicit user confirmation for each transaction introduces significant financial risk and a supply chain dependency, as detailed in `SKILL.md`.
- External report
- View on VirusTotal