Back to skill
Skillv1.0.7
VirusTotal security
alipay-pay-for-402-service · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 20, 2026, 6:11 PM
- Hash
- e25bfd52965abbc7cd81597e3d78fc974840df993905eb091083c0426a41f37d
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: alipay-pay-for-402-service Version: 1.0.7 The skill facilitates Alipay payments for HTTP 402 responses using a CLI tool (alipay-bot). It demonstrates high security awareness by instructing the agent to perform mandatory SHA-512 integrity verification of the npm package (@alipay/agent-payment) before installation and enforcing strict validation rules for filenames and URLs to prevent shell injection. The instructions in SKILL.md are focused on maintaining the integrity of the payment flow and UI, including explicit warnings against accessing sensitive directories or modifying payment parameters, which aligns with the stated professional purpose.
- External report
- View on VirusTotal