Back to skill
Skillv0.1.0

VirusTotal security

Aavegotchi GBM Skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 28, 2026, 3:58 AM
Hash
dc8791467227aa3c3c89a40af214e3d2a036589692237de3c7c0f3859c6a1905
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: aavegotchi-gbm-skill Version: 0.1.0 The skill bundle is designed for interacting with Aavegotchi GBM auctions on Base mainnet. It explicitly prioritizes safety, with extensive 'Safety Rules' and 'Shell Input Safety' sections in `SKILL.md` that instruct the AI agent to default to dry runs, never log private keys, and strictly validate user inputs to prevent RCE. All network calls are to known, legitimate endpoints (Goldsky subgraph, CoinGecko API), and on-chain interactions use the Foundry `cast` tool with clear distinctions between simulation (`cast call`) and broadcasting (`cast send`), the latter requiring explicit instruction. The Python snippets are safely embedded and used for calculations and validation, not arbitrary code execution. There is no evidence of data exfiltration to unauthorized endpoints, persistence mechanisms, or obfuscation for malicious intent.
External report
View on VirusTotal