Back to skill
Skillv1.0.0
VirusTotal security
Aavegotchi Gotchiverse · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 28, 2026, 4:16 AM
- Hash
- 6df4c275e0443bb2cf2e6120b45e5d29757be298cb89e72b3fdb40aa69112416
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: aavegotchi-gotchiverse Version: 1.0.0 The skill bundle is designed for legitimate Aavegotchi Gotchiverse operations, interacting with smart contracts and subgraphs. It explicitly requires sensitive environment variables like `PRIVATE_KEY` and `GOLDSKY_API_KEY`, which is standard for blockchain interaction. Crucially, `SKILL.md` includes robust safety instructions for the AI agent, such as 'Never print or log `PRIVATE_KEY`', 'Treat all user/subgraph values as untrusted shell input', and 'Never use `eval`, `bash -c`, `sh -c` with user values', along with input validation patterns. All network calls are directed to legitimate Goldsky subgraph endpoints. There is no evidence of intentional malicious behavior, data exfiltration to unauthorized destinations, persistence mechanisms, or obfuscation. The skill actively attempts to prevent common vulnerabilities through explicit instructions to the agent.
- External report
- View on VirusTotal