Back to skill
Skillv1.0.0
VirusTotal security
Trading Coach · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 3:17 AM
- Hash
- a49ba942890004e0208adf78c0ed68330f0c927cba91421ff9df4e742bef926a
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: trading-coach Version: 1.0.0 The SKILL.md file instructs the AI agent to `git clone` an external GitHub repository (`https://github.com/BENZEMA216/tradingcoach.git`) and subsequently execute Python scripts and install dependencies (`pip install -r requirements.txt`) from the downloaded content. This introduces a significant supply chain risk, as the actual code being executed is fetched from an external, unverified source not included in the bundle. While the stated purpose of the skill is benign trading analysis, the instruction to download and execute arbitrary external code is a high-risk capability.
- External report
- View on VirusTotal