Back to skill
Skillv1.0.0
VirusTotal security
BTC Bot | Give your agent a wallet or credit card · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:47 AM
- Hash
- abde991f919bc41011f29afa6f3951c7e71411887271192faf7a4f3704e33946
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: btc Version: 1.0.0 The skill bundle implements a high-risk financial management system for AI agents, specifically featuring an 'Encrypted Card' flow (Rail 5) detailed in 'encrypted-card.md'. This flow requires the agent to receive a file containing a decryption script ('decrypt.js') and execute it locally to access raw credit card data. While the documentation in 'skill.md' and 'encrypted-card.md' emphasizes security measures like ephemeral sub-agents and server-side guardrails, the pattern of dynamic code execution and handling sensitive payment information represents a significant risk. Additionally, 'skill.md' contains instructions for the agent to download and install multiple files to the local filesystem using 'curl' commands.
- External report
- View on VirusTotal