Back to skill
Skillv1.0.0
VirusTotal security
Cardano Staking · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:43 AM
- Hash
- 9a033fe66a13c40b4059e226b6f026a0bccc98d05434b76898f1f4a0af51129c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: cardano-staking Version: 1.0.0 The skill bundle is classified as suspicious because it requires the 'SEED_PHRASE' environment variable to be provided to the agent (SKILL.md). Requiring a raw mnemonic seed phrase for a simple staking status check is a high-risk security practice that exposes the user's entire wallet to potential theft if the environment or the underlying '@indigoprotocol/cardano-mcp' package is compromised. While the documentation describes legitimate functionality, the handling of highly sensitive credentials in this manner constitutes a critical security vulnerability.
- External report
- View on VirusTotal