Back to skill
Skillv1.0.0
VirusTotal security
Cardano Identity · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 5:40 AM
- Hash
- 470826fcfd3a61d1a4829c153c575907c1a79e1a068423a743c919965fdd829f
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: cardano-identity Version: 1.0.0 The skill requires the 'SEED_PHRASE' environment variable to be provided to the agent (SKILL.md), which is a high-risk security practice as it exposes the wallet's master recovery phrase. While the stated purpose of resolving ADAHandles is legitimate and the policy ID in 'references/mcp-tools.md' is correct, the requirement for raw mnemonic phrases creates a significant risk of credential theft if the environment or the '@indigoprotocol/cardano-mcp' package is compromised.
- External report
- View on VirusTotal