Back to skill
Skillv1.2.0

VirusTotal security

HuaHuaDailyMCP · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 6:59 AM
Hash
3ab8741d7bb43d6d17a13c35bbd54bede2961875f13c47c60729f495da6de8cc
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: huahua-daily Version: 1.2.0 The huahua-daily skill bundle is a legitimate MCP server designed to interface with the 'Huahua Daily' fund management application. It allows an AI agent to query market data, fund estimates, and user portfolio information using a dedicated API token (BAIYE_AGENT_TOKEN). The implementation in server.py is clean, using standard libraries like httpx for network requests and providing robust caching and precision-handling logic. Transaction capabilities are safely implemented as 'signals' that require manual user confirmation within the mobile app, and no evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.
External report
View on VirusTotal