Crypto Payments Comparison

• Analyzed: May 14, 2026, 3:41 AM
• Findings: 1
• Version: 1.0.2
• Hash: e6985e6d8c0fd1bce71a8f6b0b6fd2d0b6b2b2a884d89d00a351c2550e1845d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the presence of executable shell commands (`git clone`, `yarn install`, `./btcpay-setup.sh`) within the `SKILL.md` file. While these commands are presented as 'Integration Guidance' for legitimate open-source projects (PayRam and BTCPay Server) and do not show clear malicious intent, their inclusion in a markdown file processed by an AI agent represents a risky capability. An agent might interpret these as direct commands to execute, potentially leading to unintended code execution or downloading external dependencies without explicit user consent for that specific action, which falls under the 'risky capabilities without clear malicious intent' threshold for 'suspicious' classification. The relevant URLs are `https://github.com/PayRam/payram-helper-mcp-server` and `https://github.com/btcpayserver/btcpayserver-docker`.