Back to skill
Skillv1.0.17
VirusTotal security
soho · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 4:18 AM
- Hash
- f5783c904f87d21ede1f31e39be5be735d7c611dd60814d4099e7cab0782a73e
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: soho Version: 1.0.17 The SOHO Pay skill bundle provides a legitimate set of tools for an autonomous agent to interact with the SOHO Pay credit protocol on the Base network. It includes scripts for agent registration, EIP-712 signed payments (scripts/pay.js), debt repayment (scripts/repay.js), and profile status monitoring (scripts/status.js). While it requires a sensitive PRIVATE_KEY environment variable, the code demonstrates local-only signing practices, includes chainId validation to prevent cross-network replay or errors, and contains no evidence of data exfiltration or unauthorized execution.
- External report
- View on VirusTotal