Back to skill
Skillv1.0.13

VirusTotal security

Noya Agent · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:06 AM
Hash
b04b9d4c09c3f3aeeefd17226e75a5edc4f69003841dfe7482ee07ebdbd4d4d3
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: noya-agent Version: 1.0.13 The OpenClaw skill for the Noya AI agent appears benign. The `SKILL.md` clearly defines the agent's purpose (crypto trading, analysis) and explicitly instructs the AI agent to 'Never auto-confirm transactions,' which is a strong defensive measure against prompt injection. The `noya-message.sh` script correctly implements this by surfacing `[REQUIRES INPUT]` for interrupts and uses `jq` to safely embed user messages into JSON payloads, preventing shell injection. There is no evidence of malicious intent, unauthorized data exfiltration, or risky execution patterns beyond its stated purpose of interacting with the `https://safenet.one` API.
External report
View on VirusTotal