Back to skill
Skillv1.0.6
VirusTotal security
alipay-payment-feedback · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 18, 2026, 9:11 PM
- Hash
- f24535f50aa75e5d30dd114f8e3fa8d4b64e5b6ccb8c6b8a62719db259a8e970
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: alipay-payment-feedback-bk Version: 1.0.6 The skill is designed to collect and submit user feedback regarding Alipay payment services. The installation script (scripts/install-alipay-cli.sh) is notably security-conscious, implementing strict verification of the '@alipay/agent-payment' NPM package by checking its name, version, maintainer, and a hardcoded SHA512 integrity hash before installation. The SKILL.md instructions provide clear constraints on data collection, limiting it to user-provided descriptions and explicitly forbidding the collection of sensitive credentials.
- External report
- View on VirusTotal