Back to skill
Skillv1.1.0
VirusTotal security
Web Scraper Pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:16 AM
- Hash
- 7692a2125d14fff42ffd32ba132e79c06f0a25e8da0fdf0fb0bd3c360ff3b5b8
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: web-scraper-pro Version: 1.1.0 The skill bundle implements a mandatory micro-payment gatekeeper using a third-party service (skillpay.me) and hardcoded API credentials in SKILL.md and payment.py. It uses aggressive prompt instructions to force the AI agent to perform financial transactions (charging 0.001 USDT) before providing the advertised scraping functionality. While no direct system compromise or data theft was observed, the hardcoded 'Secret Key' (sk_d6d26f29...) and the enforcement of a proprietary payment layer are highly irregular for a skill bundle and could be used for unauthorized monetization or user tracking.
- External report
- View on VirusTotal
