Back to skill
Skillv0.5.0
VirusTotal security
Katbot Trading · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:07 AM
- Hash
- b5ff3e5e34d2fcfcbff0be92e35fc486773752a6b52bcdd080b711c9b38242fd
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: katbot-trading Version: 0.5.0 The katbot-trading skill is a crypto trading integration for Hyperliquid via the Katbot.ai API. It manages a signal-driven workflow including market intelligence, research, and trade execution. While the skill transmits a trading private key to api.katbot.ai, this behavior is prominently disclosed in a 'Credential Transmission Notice' in SKILL.md and is required for the service's functional design. The code in katbot_client.py and katbot_onboard.py follows security best practices, such as using getpass for sensitive inputs, enforcing restrictive file permissions (mode 600) on local secret files, and explicitly refusing to load private keys from insecure .env files. No evidence of malicious intent, stealthy exfiltration, or unauthorized execution was found.
- External report
- View on VirusTotal