Back to skill
Skillv1.0.0

VirusTotal security

Authorize.net Agentic Payments - Add agentic cards and wallets to your stack · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:02 AM
Hash
abbf3ffb94acaf876803f750f3f68a13e8ea729935b47ab4449f940acb711051
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: authorize Version: 1.0.0 The CreditClaw skill bundle provides AI agents with financial capabilities, including virtual card checkouts (Rail 5) and USDC wallet signing (x402). While the documentation includes extensive security warnings and describes server-side guardrails, the skill involves high-risk behaviors such as agent-side decryption of credit card details using AES-256-GCM and automated purchasing flows (e.g., in encrypted-card.md and stripe-x402-wallet.md). These capabilities, while aligned with the stated purpose of 'financial enablement,' represent a significant attack surface for potential misuse or exploitation, fitting the criteria for a suspicious classification due to the inherent risk of handling sensitive financial data and spending power.
External report
View on VirusTotal