Revolut Business

• Analyzed: May 12, 2026, 3:12 AM
• Findings: 1
• Version: 1.0.1
• Hash: 56919ceae179d10177a5399e9b3a1663fe481f9c6eb7d290d82d5fb1e3ea3a6d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Revolut Business skill is benign. It provides a CLI for the Revolut Business API, storing necessary credentials (private key, certificates, OAuth tokens) in the standard `~/.clawdbot/revolut/` directory. All network communication observed in `scripts/revolut.py` and `scripts/setup.py` is directed to the official Revolut Business API endpoint (`https://b2b.revolut.com/api/1.0`) or `ifconfig.me` for public IP discovery during setup. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md` to manipulate the AI agent into harmful actions.