Back to skill
Skillv1.0.2

VirusTotal security

MoltMoon Crypto Launcher · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 3:23 AM
Hash
992746a66548d077576c0b010de2e1a1a27fe01bcfc65d4bd5d9259a37d81170
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: moltmoon-agentcrypto-sdk Version: 1.0.2 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically requiring the agent to handle a `MOLTMOON_PRIVATE_KEY` for performing irreversible blockchain transactions (e.g., launching tokens, buying/selling, claiming rewards). While the `SKILL.md` instructions do not contain explicit prompt injection attempts or malicious directives for data exfiltration or unauthorized actions, the nature of the operations themselves carries significant risk. The skill also relies on an external `npm` package (`@moltmoon/sdk`), introducing a supply chain dependency risk that cannot be fully assessed from the provided files. All network communication is directed to `https://api.moltmoon.ai`.
External report
View on VirusTotal