Back to skill
Skillv1.0.6

VirusTotal security

Find Cheaper Insurance | · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:46 AM
Hash
a882c96c1068328124940f971d6543e8706ace26fda79e4889d7911458b06f9a
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: insure Version: 1.0.6 The skill bundle facilitates financial transactions for AI agents but employs high-risk execution patterns. Specifically, 'encrypted-card.md' instructs the agent to extract and execute a Node.js script ('decrypt.js') embedded within a delivered data file to handle credit card decryption, which presents a significant Remote Code Execution (RCE) risk. Additionally, 'SKILL.md' encourages a 'curl'-based installation method for local files. While these behaviors are aligned with the stated purpose of a financial platform (creditclaw.com), the reliance on executing code delivered via data channels is a major security concern.
External report
View on VirusTotal